Matthijs Mekking 375112a623 Add built-in dnssec-policy "insecure" ... Add a new built-in policy "insecure", to be used to gracefully unsign a zone. Previously you could just remove the 'dnssec-policy' configuration from your zone statement, or remove it. The built-in policy "none" (or not configured) now actually means no DNSSEC maintenance for the corresponding zone. So if you immediately reconfigure your zone from whatever policy to "none", your zone will temporarily be seen as bogus by validating resolvers. This means we can remove the functions 'dns_zone_use_kasp()' and 'dns_zone_secure_to_insecure()' again. We also no longer have to check for the existence of key state files to figure out if a zone is transitioning to insecure. (cherry picked from commit 2710d9a11d)		2021-04-30 13:58:22 +02:00
..
check	Re-order include directories	2021-02-16 12:08:21 +11:00
confgen	Text edits to manual paages	2021-01-12 15:37:47 +01:00
delv	Cleanup the isc_<*>mgr_createinc() constructors	2021-04-19 15:57:40 +02:00
dig	Update dig's man page	2021-03-25 14:33:50 -03:00
dnssec	Check that excessive iterations in logged by named when	2021-04-29 17:55:40 +10:00
named	Add built-in dnssec-policy "insecure"	2021-04-30 13:58:22 +02:00
nsupdate	nsupdate: reject attempts to add NSEC3PARAM with excessive iterations	2021-04-29 17:55:35 +10:00
pkcs11	Text edits to manual paages	2021-01-12 15:37:47 +01:00
plugins	Text edits to manual paages	2021-01-12 15:37:47 +01:00
python	Fix program name reference in dnssec-keymgr(8)	2020-12-14 13:17:27 +01:00
rndc	Text edits to manual paages	2021-01-12 15:37:47 +01:00
tests	Check insecure responses returned with too many NSEC3 iterations	2021-04-30 11:16:45 +02:00
tools	Move cleanup of queries to later in the shutdown sequence	2021-03-04 15:02:07 +01:00
win32/BINDInstall	Add libssl libraries to Windows build	2020-12-09 10:46:16 +01:00
Makefile.in	name change from "hook modules" to "plugins"	2018-12-06 10:36:50 -08:00