Matthijs Mekking bdb91e3825 Fix bug introduced by #763 related to offline keys ... In some cases we want to keep expired signatures. For example, if the KSK is offline, we don't want to fall back to signing with the ZSK. We could remove the signatures, but in any case we end up with a broken zone. The change made for GL #763 prevented the behavior to sign the DNSKEY RRset with the ZSK if the KSK was offline (and signatures were expired). The change causes the definition of "having both keys": if one key is offline, we still consider having both keys, so we don't fallback signing with the ZSK if KSK is offline. That change also works the other way, if the ZSK is offline, we don't fallback signing with the KSK. This commit fixes that, so we only fallback signing zone RRsets with the KSK, not signing key RRsets with the ZSK. (cherry picked from commit beeefe35c4)		2022-01-06 09:35:36 +01:00
..
bind9	cleanup references to ancient named.conf options	2021-10-12 23:52:39 -07:00
dns	Fix bug introduced by #763 related to offline keys	2022-01-06 09:35:36 +01:00
irs	Update the source code formatting using clang-format-13	2021-10-12 11:31:55 +02:00
isc	Disable the internal memory allocator by default	2021-12-15 13:29:19 +01:00
isccc	Update the source code formatting using clang-format-13	2021-10-12 11:31:55 +02:00
isccfg	Report duplicate dnssec-policy names	2022-01-04 09:04:07 +11:00
ns	Update the source code formatting using clang-format-13	2021-10-12 11:31:55 +02:00
win32/bindevt	update all copyright headers to eliminate the typo	2020-09-14 16:50:58 -07:00
.gitignore	added gitignore, removed cvsignore	2012-03-03 23:10:05 -08:00
Kyuafile	link in lib/isccc/tests/Kyuafile	2018-11-13 07:23:36 +11:00
Makefile.in	move samples/resolve.c to bin/tests/system	2021-04-19 14:32:53 +02:00