bind9/lib
Matthijs Mekking c125b721ef Adjust signing code to use kasp
Update the signing code in lib/dns/zone.c and lib/dns/update.c to
use kasp logic if a dnssec-policy is enabled.

This means zones with dnssec-policy should no longer follow
'update-check-ksk' and 'dnssec-dnskey-kskonly' logic, instead the
KASP keys configured dictate which RRset gets signed with what key.

Also use the next rekey event from the key manager rather than
setting it to one hour.

Mark the zone dynamic, as otherwise a zone with dnssec-policy is
not eligble for automatic DNSSEC maintenance.
2019-11-06 22:36:21 +01:00
..
bind9 Introduce dnssec-policy configuration 2019-11-06 22:31:44 +01:00
dns Adjust signing code to use kasp 2019-11-06 22:36:21 +01:00
irs prep 9.15.5 2019-10-02 06:08:59 +00:00
isc Do not use <sys/sysctl.h> on Linux 2019-11-06 15:32:04 +01:00
isccc Make VS solution upgrading unnecessary 2019-09-26 15:11:15 +02:00
isccfg kasp: Expose more key timings 2019-11-06 22:36:21 +01:00
ns Jitter signatures times when adding dynamic records. 2019-11-06 13:31:25 +01:00
samples Replace RUNTIME_CHECK(dns_name_copy(..., NULL)) with dns_name_copynf() 2019-10-01 10:43:26 +10:00
win32/bindevt Make VS solution upgrading unnecessary 2019-09-26 15:11:15 +02:00
.gitignore added gitignore, removed cvsignore 2012-03-03 23:10:05 -08:00
Kyuafile link in lib/isccc/tests/Kyuafile 2018-11-13 07:23:36 +11:00
Makefile.in remove lib/tests as nothing uses it anymore 2018-03-09 14:12:50 -08:00