Matthijs Mekking 3e49223a67 Obsolete dnssec-dnskey-kskonly update-check-ksk ...

These two configuration options worked in conjunction with 'auto-dnssec'
to determine KSK usage, and thus are now obsoleted.

However, in the code we keep KSK processing so that when a zone is
reconfigured from using 'dnssec-policy' immediately to 'none' (without
going through 'insecure'), the zone is not immediately made bogus.

Add one more test case for going straight to none, now with a dynamic
zone (no inline-signing).

2023-07-20 12:40:54 +02:00

1.3 KiB

Raw Blame History

View Raw