Mark Andrews e854c65f43 Don't sign non-apex DNSKEY records ...

DNSKEY can only be validated if it is signed by itself.  Stop
attempting to sign non apex DNSKEY RRsets.

(cherry picked from commit dd13f41ae1)

2024-05-16 12:10:01 +10:00

..

check

…

confgen

Put reference to RFC 2845 in tsig-keygen man page

2024-02-01 12:03:42 +01:00

delv

…

dig

Re-enable EDNS if an EDNS flag gets set to 1 by +ednsflags

2024-03-17 13:11:51 +10:00

dnssec

Fail if there are non apex DNSKEYs

2024-05-16 12:09:57 +10:00

named

Use dns_view_findzone instead of dns_zt_find

2024-05-14 08:46:00 +10:00

nsupdate

NetBSD has added 'hmac' to libc so rename our uses of hmac

2023-12-14 11:14:04 +11:00

plugins

…

rndc

…

tests

Don't sign non-apex DNSKEY records

2024-05-16 12:10:01 +10:00

tools

Re-enable EDNS if an EDNS flag gets set to 1 by +ednsflags

2024-03-17 13:11:51 +10:00

Makefile.am

…