]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
[9.18] fix: usr: Skip unsupported algorithms when looking for signing key
authorOndřej Surý <ondrej@isc.org>
Wed, 5 Nov 2025 10:50:42 +0000 (11:50 +0100)
committerOndřej Surý <ondrej@isc.org>
Wed, 5 Nov 2025 10:50:42 +0000 (11:50 +0100)
A mix of supported and unsupported DNSSEC algorithms in the same zone could have caused validation failures. Ignore the DNSSEC keys with unsupported algorithm when looking for the signing keys.

Closes #5622

Backport of MR !11208

Merge branch 'backport-5622-dont-fail-on-unsupported-algorithms-9.18' into 'bind-9.18'

See merge request isc-projects/bind9!11211


Trivial merge