Matthijs Mekking bbfdcc36c8 Add inline-signing to dnssec-policy ... Add an option to enable/disable inline-signing inside the dnssec-policy clause. The existing inline-signing option that is set in the zone clause takes priority, but if it is omitted, then the value that is set in dnssec-policy is taken. The built-in policies use inline-signing. This means that if you want to use the default policy without inline-signing you either have to set it explicitly in the zone clause: zone "example" { ... dnssec-policy default; inline-signing no; }; Or create a new policy, only overriding the inline-signing option: dnssec-policy "default-dynamic" { inline-signing no; }; zone "example" { ... dnssec-policy default-dynamic; }; This also means that if you are going insecure with a dynamic zone, the built-in "insecure" policy needs to be accompanied with "inline-signing no;".		2023-08-01 06:55:48 +00:00
..
delegation.test.db.in	Update the copyright information in all files in the repository	2022-01-11 09:05:02 +01:00
dnskey.test.db.in	Update the copyright information in all files in the repository	2022-01-11 09:05:02 +01:00
example.db.in	Update the copyright information in all files in the repository	2022-01-11 09:05:02 +01:00
multisigner.test.db.in	Update the copyright information in all files in the repository	2022-01-11 09:05:02 +01:00
named.conf.in	Add inline-signing to dnssec-policy	2023-08-01 06:55:48 +00:00
nsec3param.test.db.in	Update the copyright information in all files in the repository	2022-01-11 09:05:02 +01:00
relaxed.db.in	Test named's check-svcb behaviour with UPDATE	2022-10-29 00:22:54 +11:00
sign.sh	Update nsupdate system test	2023-07-20 11:04:23 +02:00
too-big.test.db.in	Update the copyright information in all files in the repository	2022-01-11 09:05:02 +01:00