ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Remove leftover 'dnssec-keys' references

Browse Source 
The option 'dnssec-keys' was introduced in 9.15 and also renamed to
'trust-anchors'. Rename the leftover references to 'trust-anchors'.
This commit is contained in:
Matthijs Mekking
2020-09-10 11:38:07 +02:00
parent 5ca1b9be90
commit e6b335c2ab
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
doc/arm/managed-keys.rst
View File

@@ -22,7 +22,7 @@ Validating Resolver
~~~~~~~~~~~~~~~~~~~
To configure a validating resolver to use :rfc:`5011` to maintain a trust
anchor, configure the trust anchor using a ``dnssec-keys`` statement and
anchor, configure the trust anchor using a ``trust-anchors`` statement and
the ``initial-key`` keyword. Information about this can be found in
:ref:`trust-anchors`.

4
doc/arm/reference.rst
View File

@@ -1885,7 +1885,7 @@ Boolean Options
``trust-anchor-telemetry``
This causes ``named`` to send specially formed queries once per day to
domains for which trust anchors have been configured via, e.g.,
``dnssec-keys`` or ``dnssec-validation auto``.
``trust-anchors`` or ``dnssec-validation auto``.
The query name used for these queries has the form
``_ta-xxxx(-xxxx)(...).<domain>``, where each "xxxx" is a group of four
@@ -4654,7 +4654,7 @@ not used to validate answers; it is superseded by the key or keys stored
in the managed-keys database.
The next time ``named`` runs after an ``initial-key`` or ``initial-ds`` has been *removed*
from the ``dnssec-keys`` statement (or changed to a ``static-key`` or ``static-ds``), the
from the ``trust-anchors`` statement (or changed to a ``static-key`` or ``static-ds``), the
corresponding zone is removed from the managed-keys database, and
:rfc:`5011` key maintenance is no longer used for that domain.