bind9/lib
Matthijs Mekking 45448fc383 Make keymgr state machine more robust
If the keymgr state machine is in an invalid state, it tries to move
it self to a valid state. But when you do key rollovers during an
invalid state, and the next state is also an invalid state, the keymgr
will happily do the transition.

It would be good to not do key rollovers if there is not a KSK and ZSK
fully omnipresent. But also it would be good to safeguard against
unexpected transitions.

This commit does that by not moving things to unretentive (which is
the state where we would remove the corresponding record from the zone)
if the state machine is currently in an invalid state.

(cherry picked from commit b19871f8a2)
2025-12-05 13:22:00 +01:00
..
dns Make keymgr state machine more robust 2025-12-05 13:22:00 +01:00
isc standardize CHECK and RETERR macros 2025-12-03 19:17:20 -08:00
isccc Remove redundant parentheses from the return statement 2024-11-19 14:26:52 +01:00
isccfg standardize CHECK and RETERR macros 2025-12-03 19:17:20 -08:00
ns standardize CHECK and RETERR macros 2025-12-03 19:17:20 -08:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
Makefile.am Move irs_resconf into libdns and remove libirs 2023-02-24 09:38:59 +00:00