Files
bind9/lib/dns
Aram Sargsyan 354ae2d7e3 Don't trust a placeholder KEYDATA record
When named starts it creates an empty KEYDATA record in the managed-keys
zone as a placeholder, then schedules a key refresh. If key refresh
fails for some reason (e.g. connectivity problems), named will load the
placeholder key into secroots as a trusted key during the next startup,
which will break the chain of trust, and named will never recover from
that state until managed-keys.bind and managed-keys.bind.jnl files are
manually deleted before (re)starting named again.

Before calling load_secroots(), check that we are not dealing with a
placeholder.
2022-11-01 09:50:34 +00:00
..
2022-10-29 00:22:54 +11:00
2022-10-17 11:58:26 +01:00
2022-10-25 10:35:07 +02:00
2022-10-14 16:39:21 +02:00
2022-10-17 11:58:26 +01:00
2022-06-09 10:47:04 +00:00
2022-10-17 11:58:26 +01:00
2022-06-28 11:56:31 +02:00
2022-10-25 10:35:07 +02:00
2022-10-29 00:22:54 +11:00
2022-07-18 13:38:47 +02:00
2022-09-08 11:27:31 +02:00
2022-09-13 12:07:13 +10:00
2022-07-15 10:33:46 +00:00
2022-10-17 11:58:26 +01:00
2022-10-29 00:22:54 +11:00
2022-10-17 11:58:26 +01:00
2022-09-23 13:23:49 +00:00