ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Update inline-signing checkconf code

Browse Source 
When using automated DNSSEC management, it is required that the zone
is dynamic, or that inline-signing is enabled (or both). Update the
checkconf code to also allow inline-signing to be enabled within
dnssec-policy.
This commit is contained in:
Matthijs Mekking
2022-12-09 12:22:49 +01:00
parent bbfdcc36c8
commit 495597a91b
7 changed files with 57 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
bin/tests/system/zonechecks/ns1/named.conf.in
View File

@@ -36,6 +36,7 @@ controls {
};
dnssec-policy "zonechecks" {
inline-signing no;
keys {
ksk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
zsk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;