bind9/bin/dnssec
Mark Andrews 529fa790a9 Fail if there are non apex DNSKEYs
DNSSEC only works when DNSKEYs are self signed.  This only occurs
when the DNSKEY RRset is at the apex.  Cause dnssec-signzone to
fail if it attempts to sign an non-apex DNSKEY RRset.

(cherry picked from commit b3efc15be4)
2024-05-16 12:09:57 +10:00
..
.gitignore [master] dnssec-cds 2017-10-05 01:04:18 -07:00
dnssec-cds.c dnssec-checkds: cleanup memory on error paths 2023-02-09 09:00:28 +11:00
dnssec-cds.rst Add internal hyperlinks to See Also section of manual pages 2022-03-14 11:01:32 +01:00
dnssec-dsfromkey.c Replace ISC_NORETURN with C11's noreturn 2022-03-25 08:42:18 +01:00
dnssec-dsfromkey.rst Add internal hyperlinks to See Also section of manual pages 2022-03-14 11:01:32 +01:00
dnssec-importkey.c Replace ISC_NORETURN with C11's noreturn 2022-03-25 08:42:18 +01:00
dnssec-importkey.rst Teach dnssec-settime to read unset times that it writes 2022-05-23 15:15:10 +02:00
dnssec-keyfromlabel.c Update sources to Clang 15 formatting 2022-11-29 09:14:07 +01:00
dnssec-keyfromlabel.rst Clarify dnssec-keyfromlabel -a in man page 2022-06-10 07:55:12 +02:00
dnssec-keygen.c Update sources to Clang 15 formatting 2022-11-29 09:14:07 +01:00
dnssec-keygen.rst dnssec-keygen man page still says it can do TSIG 2024-02-01 12:03:36 +01:00
dnssec-revoke.c Update sources to Clang 15 formatting 2022-11-29 09:14:07 +01:00
dnssec-revoke.rst Add internal hyperlinks to See Also section of manual pages 2022-03-14 11:01:32 +01:00
dnssec-settime.c Update sources to Clang 15 formatting 2022-11-29 09:14:07 +01:00
dnssec-settime.rst Remove trailing whitespace from all text files 2023-06-13 16:13:16 +02:00
dnssec-signzone.c Fail if there are non apex DNSKEYs 2024-05-16 12:09:57 +10:00
dnssec-signzone.rst Mention RFC 9276 Guidance for NSEC3 Parameter Settings 2024-05-08 07:09:35 +00:00
dnssec-verify.c Replace ISC_NORETURN with C11's noreturn 2022-03-25 08:42:18 +01:00
dnssec-verify.rst Add internal hyperlinks to See Also section of manual pages 2022-03-14 11:01:32 +01:00
dnssectool.c Update sources to Clang 15 formatting 2022-11-29 09:14:07 +01:00
dnssectool.h Replace ISC_NORETURN with C11's noreturn 2022-03-25 08:42:18 +01:00
Makefile.am Move the include Makefile.tests to the bottom of Makefile.am(s) 2021-06-24 15:33:52 +02:00