From: Ondřej Surý <ondrej@isc.org>
Date: Fri, 20 Mar 2026 02:25:21 +0000 (+0100)
Subject: [9.20] fix: usr: Fix NTA (Negative Trust Anchor) expiration issue
X-Git-Tag: v9.20.22~15
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=c009a48ed55bde723fbdb2b7d68761c81c354c5b;p=thirdparty%2Fbind9.git

[9.20] fix: usr: Fix NTA (Negative Trust Anchor) expiration issue

When a configured NTA for a name expired, any possibly cached
data for the name (with "insecure" DNSSEC validation result)
was not flushed from the resolver's cache. This has been fixed.

Closes #5747

Backport of MR !11597

Merge branch 'backport-5747-nta-expiry-cache-flush-bug-fix-9.20' into 'bind-9.20'

See merge request isc-projects/bind9!11715
---

c009a48ed55bde723fbdb2b7d68761c81c354c5b