Commit graph

10 commits

Author SHA1 Message Date
Evan Hunt
d5bd8bb71a [v9_11] de-DLV
4749.	[func]		The ISC DLV service has been shut down, and all
			DLV records have been removed from dlv.isc.org.
			- Removed references to ISC DLV in documentation
			- Removed DLV key from bind.keys
			- No longer use ISC DLV by default in delv
			[RT #46155]
2017-10-03 00:43:19 -07:00
Evan Hunt
f3497a3cb4 [v9_11] revised comment 2017-02-04 00:24:14 -08:00
Evan Hunt
c4cd9250fe [v9_11] Remove obsolete Id lines that showed old date on generated bind.keys.h 2017-02-02 11:16:30 -08:00
Mark Andrews
b5ad091624 4564. [maint] Update the built in managed keys to include the
upcoming root KSK. [RT #44579]

(cherry picked from commit 00a83c64d7)
2017-02-02 17:36:17 +11:00
Evan Hunt
79bf7c874b 3001. [func] Added a default trust anchor for the root zone, which
can be switched on by setting "dnssec-validation auto;"
			in the named.conf options. [RT #21727]
2011-01-03 23:45:08 +00:00
Mark Andrews
1154295949 cvs version identifier 2010-06-20 07:15:28 +00:00
Evan Hunt
8f7de3db7e Respinning to fix memory leak in dnssec-signzone. (Also adopting doc changes.) 2009-10-16 02:59:41 +00:00
Evan Hunt
8036473e6c Update comment, since the key isn't actually going to expire in 9/2009
after all.
2009-09-09 15:44:33 +00:00
Evan Hunt
85be60e3c8 2665. [func] Clarify syntax for managed-keys {} statement, add
ARM documentation about RFC 5011 support. [RT #19874]
2009-09-01 07:14:26 +00:00
Evan Hunt
3a30493983 2572. [func] Simplify DLV configuration, with a new option
"dnssec-lookaside auto;"  This is the equivalent
			of "dnssec-lookaside . trust-anchor dlv.isc.org;"
			plus setting a trusted-key for dlv.isc.org.

			Note: The trusted key is hard-coded into named,
			but is also stored in (and can be overridden
			by) $sysconfdir/bind.keys.  As the ISC DLV key
			rolls over it can be kept up to date by replacing
			the bind.keys file with a key downloaded from
			https://www.isc.org/solutions/dlv. [RT #18685]
2009-03-04 02:42:31 +00:00