From ea50826dca1fc4286cfc20a095afe83d64375423 Mon Sep 17 00:00:00 2001 From: Matthijs Mekking Date: Fri, 17 Jun 2022 10:29:51 +0200 Subject: [PATCH] Add comment on DNSSEC signing zone configuration I was slightly confused here, so IMO it can use a comment. (cherry picked from commit c80531758cb2bfc5aa4cea14046f0daba4f87dd6) --- bin/named/zoneconf.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/bin/named/zoneconf.c b/bin/named/zoneconf.c index 2fdd36b8b1..c9528f5d36 100644 --- a/bin/named/zoneconf.c +++ b/bin/named/zoneconf.c @@ -1554,6 +1554,10 @@ named_zone_configure(const cfg_obj_t *config, const cfg_obj_t *vconfig, RETERR(configure_zone_ssutable(zoptions, mayberaw, zname)); } + /* + * Configure DNSSEC signing. These apply to primary zones or zones that + * use inline-signing (raw != NULL). + */ if (ztype == dns_zone_primary || raw != NULL) { const cfg_obj_t *validity, *resign; bool allow = false, maint = false;