bind9/lib
Matthijs Mekking 5f464d15a0 dnssec-policy inheritance from options/view
'dnssec-policy' can now also be set on the options and view level and
a zone that does not set 'dnssec-policy' explicitly will inherit it
from the view or options level.

This requires a new keyword to be introduced: 'none'.  If set to
'none' the zone will not be DNSSEC maintained, in other words it will
stay unsigned.  You can use this to break the inheritance.  Of course
you can also break the inheritance by referring to a different
policy.

The keywords 'default' and 'none' are not allowed when configuring
your own dnssec-policy statement.

Add appropriate tests for checking the configuration (checkconf)
and add tests to the kasp system test to verify the inheritance
works.

Edit the kasp system test such that it can deal with unsigned zones
and views (so setting a TSIG on the query).
2019-11-06 22:36:21 +01:00
..
bind9 dnssec-policy inheritance from options/view 2019-11-06 22:36:21 +01:00
dns Insist that kasp is not linked. 2019-11-06 22:36:21 +01:00
irs prep 9.15.5 2019-10-02 06:08:59 +00:00
isc Do not use <sys/sysctl.h> on Linux 2019-11-06 15:32:04 +01:00
isccc Make VS solution upgrading unnecessary 2019-09-26 15:11:15 +02:00
isccfg dnssec-policy inheritance from options/view 2019-11-06 22:36:21 +01:00
ns Jitter signatures times when adding dynamic records. 2019-11-06 13:31:25 +01:00
samples Replace RUNTIME_CHECK(dns_name_copy(..., NULL)) with dns_name_copynf() 2019-10-01 10:43:26 +10:00
win32/bindevt Make VS solution upgrading unnecessary 2019-09-26 15:11:15 +02:00
.gitignore added gitignore, removed cvsignore 2012-03-03 23:10:05 -08:00
Kyuafile link in lib/isccc/tests/Kyuafile 2018-11-13 07:23:36 +11:00
Makefile.in remove lib/tests as nothing uses it anymore 2018-03-09 14:12:50 -08:00