2007. [func] It is now possible to explicitly enable DNSSEC

validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
This commit is contained in:
Mark Andrews
2006-03-09 23:21:54 +00:00
parent 93875126dc
commit cfe92110ce
19 changed files with 107 additions and 34 deletions

View File

@@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: named.conf,v 1.20 2004/03/10 02:19:53 marka Exp $ */
/* $Id: named.conf,v 1.21 2006/03/09 23:21:53 marka Exp $ */
// NS1
@@ -32,6 +32,7 @@ options {
recursion no;
notify yes;
dnssec-enable yes;
dnssec-validation yes;
};
zone "." {

View File

@@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: named.conf,v 1.24 2004/05/05 01:32:57 marka Exp $ */
/* $Id: named.conf,v 1.25 2006/03/09 23:21:53 marka Exp $ */
// NS2
@@ -32,6 +32,7 @@ options {
recursion no;
notify yes;
dnssec-enable yes;
dnssec-validation yes;
};
zone "." {

View File

@@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: named.conf,v 1.27 2004/05/05 01:32:57 marka Exp $ */
/* $Id: named.conf,v 1.28 2006/03/09 23:21:53 marka Exp $ */
// NS3
@@ -32,6 +32,7 @@ options {
recursion no;
notify yes;
dnssec-enable yes;
dnssec-validation yes;
};
zone "." {

View File

@@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: named.conf,v 1.23 2004/04/15 23:40:23 marka Exp $ */
/* $Id: named.conf,v 1.24 2006/03/09 23:21:53 marka Exp $ */
// NS4
@@ -31,6 +31,7 @@ options {
listen-on-v6 { none; };
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-must-be-secure mustbesecure.example yes;
};

View File

@@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: named.conf,v 1.20 2004/03/10 02:19:54 marka Exp $ */
/* $Id: named.conf,v 1.21 2006/03/09 23:21:53 marka Exp $ */
// NS5
@@ -31,6 +31,7 @@ options {
listen-on-v6 { none; };
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
};
zone "." {

View File

@@ -14,7 +14,7 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: named.conf,v 1.7 2004/06/04 02:31:41 marka Exp $ */
/* $Id: named.conf,v 1.8 2006/03/09 23:21:53 marka Exp $ */
// NS6
@@ -32,6 +32,7 @@ options {
notify yes;
disable-algorithms . { DSA; };
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside . trust-anchor dlv;
};