ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

[master] clarify managed-keys syntax

Browse Source
This commit is contained in:
Evan Hunt
2013-01-10 11:59:21 -08:00
parent 3b9d9ad58b
commit 54ca241334
2 changed files with 15 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
CHANGES
View File

@@ -1,3 +1,8 @@
3463. [doc] Clarify managed-keys syntax in ARM. [RT 32232]
3462. [doc] Clarify server selection behavior of dig when using
-4 or -6 options. [RT #32181]
3461. [bug] Negative responses could incorrectly have AD=1
set. [RT #32237]

17
doc/arm/Bv9ARM-book.xml
View File

@@ -10239,8 +10239,8 @@ ns.domain.com.rpz-nsdname CNAME .
<title><command>managed-keys</command> Statement Grammar</title>
<programlisting><command>managed-keys</command> {
<replaceable>string</replaceable> initial-key <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>string</replaceable> ;
<optional> <replaceable>string</replaceable> initial-key <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>string</replaceable> ; <optional>...</optional></optional>
<replaceable>name</replaceable> <literal>initial-key</literal> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key-data</replaceable> ;
<optional> <replaceable>name</replaceable> <literal>initial-key</literal> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key-data</replaceable> ; <optional>...</optional></optional>
};
</programlisting>
@@ -10348,13 +10348,16 @@ ns.domain.com.rpz-nsdname CNAME .
<command>named</command>.)
</para>
<para>
If the <command>dnssec-lookaside</command> option is
If the <command>dnssec-validation</command> option is
set to <userinput>auto</userinput>, <command>named</command>
will automatically initialize a managed key for the
zone <literal>dlv.isc.org</literal>. The key that is
used to initialize the key maintenance process is built
into <command>named</command>, and can be overridden
from <command>bindkeys-file</command>.
root zone. Similarly, if the <command>dnssec-lookaside</command>
option is set to <userinput>auto</userinput>,
<command>named</command> will automatically initialize
a managed key for the zone <literal>dlv.isc.org</literal>.
In both cases, the key that is used to initialize the key
maintenance process is built into <command>named</command>,
and can be overridden from <command>bindkeys-file</command>.
</para>
</sect2>