bind9/bin/dnssec
Matthijs Mekking 9fe520ece9 Implement named-checkconf -k (check keys)
With named-checkconf -k you can check your configuration including
checking the dnssec-policy keys against the configured keystores. If
there is a mismatch in the key files versus the policy, named-checkconf
will fail. This is useful for running before migrating to dnssec-policy.

For logging purposes, introduce a function that writes the identifying
information about a policy key into a string.

Allow a dnssec key to be initialized outside the keymgr code.

Add 'log_errors' to 'cfg_kasp_fromconfig' to avoid duplicate error
logs.
2025-09-24 17:03:06 +02:00
..
.gitignore
dnssec-cds.c
dnssec-cds.rst
dnssec-dsfromkey.c
dnssec-dsfromkey.rst
dnssec-importkey.c
dnssec-importkey.rst
dnssec-keyfromlabel.c
dnssec-keyfromlabel.rst
dnssec-keygen.c
dnssec-keygen.rst
dnssec-ksr.c
dnssec-ksr.rst
dnssec-revoke.c
dnssec-revoke.rst
dnssec-settime.c
dnssec-settime.rst
dnssec-signzone.c
dnssec-signzone.rst
dnssec-verify.c
dnssec-verify.rst
dnssectool.c Implement named-checkconf -k (check keys) 2025-09-24 17:03:06 +02:00
dnssectool.h
meson.build