mirror of
https://github.com/isc-projects/bind9.git
synced 2026-03-29 13:53:29 -04:00
644f0d958a
When dnssec-policy was introduced, it implicitly set inline-signing. But DNSSEC maintenance required either inline-signing to be enabled, or a dynamic zone. In other words, not in all cases you want to DNSSEC maintain your zone with inline-signing. Change the behavior and determine whether inline-signing is required: if the zone is dynamic, don't use inline-signing, otherwise implicitly set it. You can also explicitly set inline-signing to yes with dnssec-policy, the restriction that both inline-signing and dnssec-policy cannot be set at the same time is now lifted. However, 'inline-signing no;' on a non-dynamic zone with a dnssec-policy is not possible. |
||
|---|---|---|
| .. | ||
| include | ||
| unix | ||
| win32 | ||
| .gitignore | ||
| bind9.xsl | ||
| bind9.xsl.h | ||
| builtin.c | ||
| config.c | ||
| control.c | ||
| controlconf.c | ||
| convertxsl.pl | ||
| fuzz.c | ||
| geoip.c | ||
| log.c | ||
| logconf.c | ||
| main.c | ||
| Makefile.in | ||
| named.8 | ||
| named.conf.5 | ||
| named.conf.docbook | ||
| named.conf.html | ||
| named.docbook | ||
| named.html | ||
| server.c | ||
| statschannel.c | ||
| tkeyconf.c | ||
| tsigconf.c | ||
| zoneconf.c | ||