bind9/lib
Matthijs Mekking 76cf72e65a Correctly initialize old key with state file
The 'key_init()' function is used to initialize a state file for keys
that don't have one yet. This can happen if you are migrating from a
'auto-dnssec' or 'inline-signing' to a 'dnssec-policy' configuration.

It did not look at the "Inactive" and "Delete" timing metadata and so
old keys left behind in the key directory would also be considered as
a possible active key. This commit fixes this and now explicitly sets
the key goal to OMNIPRESENT for keys that have their "Active/Publish"
timing metadata in the past, but their "Inactive/Delete" timing
metadata in the future. If the "Inactive/Delete" timing metadata is
also in the past, the key goal is set to HIDDEN.

If the "Inactive/Delete" timing metadata is in the past, also the
key states are adjusted to either UNRETENTIVE or HIDDEN, depending on
how far in the past the metadata is set.
2021-02-03 08:36:01 +01:00
..
bind9 Use -release instead of -version-info for internal library SONAMEs 2021-01-25 14:19:53 +01:00
dns Correctly initialize old key with state file 2021-02-03 08:36:01 +01:00
irs Use -release instead of -version-info for internal library SONAMEs 2021-01-25 14:19:53 +01:00
isc Cleanup redundant isc_rwlock_init() result checks 2021-02-03 12:22:33 +11:00
isccc Use -release instead of -version-info for internal library SONAMEs 2021-01-25 14:19:53 +01:00
isccfg implement xfrin via XoT 2021-01-29 12:07:38 +01:00
ns Only start stale refresh window when resuming 2021-01-28 16:38:34 +01:00
samples Add libssl libraries to Windows build 2020-11-09 16:00:28 +01:00
win32/bindevt update all copyright headers to eliminate the typo 2020-09-14 16:20:40 -07:00
.gitignore Provide unit test driver 2020-05-21 12:13:01 +02:00
Makefile.am Complete rewrite the BIND 9 build system 2020-04-21 14:19:48 +02:00
unit-test-driver.sh.in Provide unit test driver 2020-05-21 12:13:01 +02:00