bind9/bin/dnssec
Matthijs Mekking 079898cbf6
Implement named-checkconf -k (check keys)
With named-checkconf -k you can check your configuration including
checking the dnssec-policy keys against the configured keystores. If
there is a mismatch in the key files versus the policy, named-checkconf
will fail. This is useful for running before migrating to dnssec-policy.

For logging purposes, introduce a function that writes the identifying
information about a policy key into a string.

Allow a dnssec key to be initialized outside the keymgr code.

Add 'log_errors' to 'cfg_kasp_fromconfig' to avoid duplicate error
logs.

(cherry picked from commit 9fe520ece9)
2025-09-29 15:13:26 +02:00
..
.gitignore Introduce new DNSSEC tool dnssec-ksr 2024-04-19 10:41:04 +02:00
dnssec-cds.c Adaptive memory allocation strategy for qp-tries 2025-08-05 12:48:19 +02:00
dnssec-cds.rst Add internal hyperlinks to See Also section of manual pages 2022-03-14 10:46:36 +01:00
dnssec-dsfromkey.c Adaptive memory allocation strategy for qp-tries 2025-08-05 12:48:19 +02:00
dnssec-dsfromkey.rst Update man pages for deprecated algorithms 2025-07-16 01:40:00 +10:00
dnssec-importkey.c Adaptive memory allocation strategy for qp-tries 2025-08-05 12:48:19 +02:00
dnssec-importkey.rst Teach dnssec-settime to read unset times that it writes 2022-05-17 16:28:40 +02:00
dnssec-keyfromlabel.c Warn about deprecated DNSKEY and DS algorithms / digest types 2025-07-16 01:39:58 +10:00
dnssec-keyfromlabel.rst Update man pages for deprecated algorithms 2025-07-16 01:40:00 +10:00
dnssec-keygen.c Warn about deprecated DNSKEY and DS algorithms / digest types 2025-07-16 01:39:58 +10:00
dnssec-keygen.rst Update man pages for deprecated algorithms 2025-07-16 01:40:00 +10:00
dnssec-ksr.c Use clang-format-20 to update formatting 2025-06-25 13:32:08 +10:00
dnssec-ksr.rst dnssec-ksr keygen -o to create KSKs 2024-11-04 01:10:34 +00:00
dnssec-revoke.c Remove redundant parentheses from the return statement 2024-11-19 14:26:52 +01:00
dnssec-revoke.rst Add internal hyperlinks to See Also section of manual pages 2022-03-14 10:46:36 +01:00
dnssec-settime.c Remove redundant parentheses from the return statement 2024-11-19 14:26:52 +01:00
dnssec-settime.rst Remove trailing whitespace from all text files 2023-06-13 15:05:40 +02:00
dnssec-signzone.c Add and use __attribute__((nonnull)) in dnssec-signzone.c 2025-08-28 14:24:48 +00:00
dnssec-signzone.rst Fix broken links in documentation 2025-01-27 09:42:47 +00:00
dnssec-verify.c Adaptive memory allocation strategy for qp-tries 2025-08-05 12:48:19 +02:00
dnssec-verify.rst Document new -J option for dnssec-signzone and dnssec-verify 2024-07-08 14:53:01 +02:00
dnssectool.c Implement named-checkconf -k (check keys) 2025-09-29 15:13:26 +02:00
dnssectool.h Add restrict key tag range support 2024-08-23 07:42:21 +10:00
Makefile.am Move common create key functions to dnssectool.c 2024-04-19 10:41:04 +02:00