From: Mark Andrews <marka@isc.org>
Date: Fri, 6 Dec 2024 02:20:57 +0000 (+0000)
Subject: [9.18] fix: usr: Fix dnssec-signzone signing non-DNSKEY RRsets with revoked keys
X-Git-Tag: v9.18.33~28
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=bf2f4d4aad8260506406c86e5631eb103b7bfdc5;p=thirdparty%2Fbind9.git

[9.18] fix: usr: Fix dnssec-signzone signing non-DNSKEY RRsets with revoked keys

`dnssec-signzone` was using revoked keys for signing RRsets other than DNSKEY.  This has been corrected.

Closes #5070

Backport of MR !9800

Merge branch 'backport-5070-dnssec-signzone-fix-revoke-9.18' into 'bind-9.18'

See merge request isc-projects/bind9!9841
---

bf2f4d4aad8260506406c86e5631eb103b7bfdc5