From: Matthijs Mekking Date: Wed, 24 Sep 2025 15:44:08 +0000 (+0000) Subject: new: usr: Add dnssec-policy keys configuration check to named-checkconf X-Git-Tag: v9.21.14~24 X-Git-Url: http://git.ipfire.org/index.cgi?a=commitdiff_plain;h=23a79b42ea46db80b7481eb7d1eab1e863ded677;p=thirdparty%2Fbind9.git new: usr: Add dnssec-policy keys configuration check to named-checkconf A new option `-k` is added to `named-checkconf` that allows checking the `dnssec-policy` `keys` configuration against the configured key stores. If the found key files are not in sync with the given `dnssec-policy`, the check will fail. This is useful to run before migrating to `dnssec-policy`. Closes #5486 Merge branch '5486-named-checkconf-dnssec-policy-key-directory' into 'main' See merge request isc-projects/bind9!10907 --- 23a79b42ea46db80b7481eb7d1eab1e863ded677