bind9/lib
Matthijs Mekking 68f0fc6309 Force set DS state after 'rndc dnssec -checkds'
Set the DS state after issuing 'rndc dnssec -checkds'. If the DS
was published, it should go in RUMOURED state, regardless whether it
is already safe to do so according to the state machine.

Leaving it in HIDDEN (or if it was magically already in OMNIPRESENT or
UNRETENTIVE) would allow for easy shoot in the foot situations.

Similar, if the DS was withdrawn, the state should be set to
UNRETENTIVE. Leaving it in OMNIPRESENT (or RUMOURED/HIDDEN)
would also allow for easy shoot in the foot situations.

(cherry picked from commit ee42f66fbe)
2023-01-30 09:27:38 +01:00
..
bind9 remove nonfunctional DSCP implementation 2023-01-09 14:23:26 -08:00
dns Force set DS state after 'rndc dnssec -checkds' 2023-01-30 09:27:38 +01:00
irs Move all the unit tests to /tests/<libname>/ 2022-05-31 12:06:00 +02:00
isc Fix building BIND on DragonFly BSD (on both older an newer versions) 2023-01-20 00:56:16 +02:00
isccc Update sources to Clang 15 formatting 2022-11-29 09:14:07 +01:00
isccfg add a configuration option for the update quota 2023-01-12 12:02:35 +01:00
ns BIND 9.18.11 2023-01-25 21:26:22 +01:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
Makefile.am move samples/resolve.c to bin/tests/system 2021-04-16 14:29:43 +02:00