bind9/lib
Matthijs Mekking 2710d9a11d Add built-in dnssec-policy "insecure"
Add a new built-in policy "insecure", to be used to gracefully unsign
a zone. Previously you could just remove the 'dnssec-policy'
configuration from your zone statement, or remove it.

The built-in policy "none" (or not configured) now actually means
no DNSSEC maintenance for the corresponding zone. So if you
immediately reconfigure your zone from whatever policy to "none",
your zone will temporarily be seen as bogus by validating resolvers.

This means we can remove the functions 'dns_zone_use_kasp()' and
'dns_zone_secure_to_insecure()' again. We also no longer have to
check for the existence of key state files to figure out if a zone
is transitioning to insecure.
2021-04-30 11:18:38 +02:00
..
bind9 Add built-in dnssec-policy "insecure" 2021-04-30 11:18:38 +02:00
dns Add built-in dnssec-policy "insecure" 2021-04-30 11:18:38 +02:00
irs Record skipped unit test as skipped in Automake framework 2021-02-15 11:18:03 +01:00
isc Add malloc attribute to memory allocation functions 2021-04-26 11:32:17 -03:00
isccc Record skipped unit test as skipped in Automake framework 2021-02-15 11:18:03 +01:00
isccfg Add built-in dnssec-policy "insecure" 2021-04-30 11:18:38 +02:00
ns Handle DNAME lookup via itself 2021-04-29 10:30:00 +02:00
win32/bindevt update all copyright headers to eliminate the typo 2020-09-14 16:20:40 -07:00
.gitignore Provide unit test driver 2020-05-21 12:13:01 +02:00
Makefile.am move samples/resolve.c to bin/tests/system 2021-04-16 14:29:43 +02:00
unit-test-driver.sh.in Enforce a run time limit on unit test binaries 2021-04-07 11:41:45 +02:00