ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Change nsec3param salt config to saltlen

Browse Source 
Upon request from Mark, change the configuration of salt to salt
length.

Introduce a new function 'dns_zone_checknsec3aram' that can be used
upon reconfiguration to check if the existing NSEC3 parameters are
in sync with the configuration. If a salt is used that matches the
configured salt length, don't change the NSEC3 parameters.

(cherry picked from commit 6f97bb6b1f)
This commit is contained in:
Matthijs Mekking
2020-10-23 15:02:19 +02:00
parent d35dab3db8
commit 52d3bf5f31
21 changed files with 204 additions and 114 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
bin/tests/system/nsec3/ns3/named.conf.in
View File

@@ -25,7 +25,7 @@ dnssec-policy "optout" {
};
dnssec-policy "nsec3-other" {
nsec3param iterations 11 optout yes salt "deadbeef";
nsec3param iterations 11 optout yes salt-length 0;
};
options {