bind9/lib
Matthijs Mekking 8e31f6981a Only warn if we could not delete signature
BIND can log this warning:

    zone example.ch/IN (signed): Key example.ch/ECDSAP256SHA256/56340
      missing or inactive and has no replacement: retaining signatures.

This log can happen when BIND tries to remove signatures because the
are about to expire or to be resigned. These RRsets may be signed with
the KSK if the ZSK files has been removed from disk. When we have
created a new ZSK we can replace the signatures creeated by the KSK
with signatures from the new ZSK.

It complains about the KSK being missing or inactive, but actually it
takes the key id from the RRSIG.

The warning is logged if BIND detects the private ZSK file is missing.

The warning is logged even if we were able to delete the signature.

With the change from this commit it only logs this warning if it is not
okay to delete the signature.

(cherry picked from commit 2d2858841a)
2022-01-06 09:35:29 +01:00
..
bind9 cleanup references to ancient named.conf options 2021-10-12 23:52:39 -07:00
dns Only warn if we could not delete signature 2022-01-06 09:35:29 +01:00
irs Update the source code formatting using clang-format-13 2021-10-12 11:31:55 +02:00
isc Disable the internal memory allocator by default 2021-12-15 13:29:19 +01:00
isccc Update the source code formatting using clang-format-13 2021-10-12 11:31:55 +02:00
isccfg Report duplicate dnssec-policy names 2022-01-04 09:04:07 +11:00
ns Update the source code formatting using clang-format-13 2021-10-12 11:31:55 +02:00
win32/bindevt update all copyright headers to eliminate the typo 2020-09-14 16:50:58 -07:00
.gitignore added gitignore, removed cvsignore 2012-03-03 23:10:05 -08:00
Kyuafile link in lib/isccc/tests/Kyuafile 2018-11-13 07:23:36 +11:00
Makefile.in move samples/resolve.c to bin/tests/system 2021-04-19 14:32:53 +02:00