Matthijs Mekking 88e5bc0687 Update find_zone_keys for dynamic update ... The find_zone_keys() function was not working properly for inline-signed zones. It only worked if the DNSKEY records were also published in the unsigned version of the zone. But this is not the case when you use dnssec-policy, the DNSKEY records will only occur in the signed version of the zone. Therefor, when looking for keys to sign the zone, only the newly added keys in the dynamic update were found (which could be zero), ignoring existing keys. Also, if a DNSKEY was added, it would try to sign the zone with just this new key, and this would only work if the key files for that key were imported into the key-directory. This is a design error, because the goal is to sign the zone with the keys for which we actually have key files for. So instead of looking for DNSKEY records to then search for the matching key files, call dns_dnssec_findmatchingkeys() which just looks for the keys we have on disk for the given zone. It will also set the correct DNSSEC signing hints.		2023-06-14 09:08:56 +02:00
..
dns	Update find_zone_keys for dynamic update	2023-06-14 09:08:56 +02:00
isc	Fix typo in synchronize_rcu macro (add h)	2023-06-06 08:10:09 +10:00
isccc	Fix the streaming read callback shutdown logic	2023-04-20 12:58:32 +02:00
isccfg	Add configuration option 'cdnskey'	2023-05-11 17:07:51 +02:00
ns	Use appropriately sized send buffers for DNS messages over TCP	2023-06-06 13:40:42 +02:00
.gitignore	The isc/platform.h header has been completely removed	2021-07-06 05:33:48 +00:00
Makefile.am	Move irs_resconf into libdns and remove libirs	2023-02-24 09:38:59 +00:00