7 commits

Author	SHA1	Message	Date
Evan Hunt	a5607f268d	Corrected comment in bind.keys: "dnssec-validation auto" doesn't work in 9.7.	2011-03-25 17:46:40 +00:00
Evan Hunt	2bf23735a3	Updated comments, added root key (for informational purposes, not for ... direct use by named). [rt21727]	2011-01-04 19:14:48 +00:00
Mark Andrews	9c6a6f9134	add cvs id	2010-06-20 07:32:24 +00:00
Evan Hunt	8f7de3db7e	Respinning to fix memory leak in dnssec-signzone. (Also adopting doc changes.)	2009-10-16 02:59:41 +00:00
Evan Hunt	8036473e6c	Update comment, since the key isn't actually going to expire in 9/2009 ... after all.	2009-09-09 15:44:33 +00:00
Evan Hunt	85be60e3c8	2665. [func] Clarify syntax for managed-keys {} statement, add ... ARM documentation about RFC 5011 support. [RT #19874]	2009-09-01 07:14:26 +00:00
Evan Hunt	3a30493983	2572. [func] Simplify DLV configuration, with a new option ... "dnssec-lookaside auto;" This is the equivalent of "dnssec-lookaside . trust-anchor dlv.isc.org;" plus setting a trusted-key for dlv.isc.org. Note: The trusted key is hard-coded into named, but is also stored in (and can be overridden by) $sysconfdir/bind.keys. As the ISC DLV key rolls over it can be kept up to date by replacing the bind.keys file with a key downloaded from https://www.isc.org/solutions/dlv. [RT #18685]	2009-03-04 02:42:31 +00:00