Fallback to built in trust-anchors, managed-keys, or trusted-keys

if the bind.keys file cannot be parsed.

(cherry picked from commit d02a14c795)

CHANGES

@@ -1,3 +1,7 @@
+5465.	[func]		Fallback to built in trust-anchors, managed-keys, or
+			trusted-keys if the bindkeys-file (bind.keys) cannot
+			be parsed. [GL #1235]
+
 5464.	[bug]		Specifying saving more than 128 files when rolling
 			dnstap / log files would cause buffer overflow.
 			[GL #1989]

bin/named/server.c

@@ -8379,7 +8379,14 @@ load_configuration(const char *filename, named_server_t *server,
 
 		result = cfg_parse_file(bindkeys_parser, server->bindkeysfile,
 					&cfg_type_bindkeys, &bindkeys);
-		CHECK(result);
+		if (result != ISC_R_SUCCESS) {
+			isc_log_write(named_g_lctx, NAMED_LOGCATEGORY_GENERAL,
+				      NAMED_LOGMODULE_SERVER, ISC_LOG_INFO,
+				      "unable to parse '%s' error '%s'; using "
+				      "built-in keys instead",
+				      server->bindkeysfile,
+				      isc_result_totext(result));
+		}
 	} else {
 		isc_log_write(named_g_lctx, NAMED_LOGCATEGORY_GENERAL,
 			      NAMED_LOGMODULE_SERVER, ISC_LOG_INFO,