Matthijs Mekking 844bde0c70 Force full sign to generate new signatures ... When introducing the kasp logic, a full sign of the zone did not generate new signatures for the new active keys during a ZSK rollover. The introduced kasp logic ensured that the rollover is performed smoothly, as in the signatures are only replaced if the old signature is close to expiring (depending on the signatures-refresh option). Fix by maintaining a fullsign boolean value in the signing structure, that will ensure the RRsets are signed with the correct key, rather than a similar good key. In case of a fullsign, we can also remove signatures from inactive keys. Remove the unused dns_zone_signwithkey function.		2025-09-26 12:49:23 +02:00
..
dns	Force full sign to generate new signatures	2025-09-26 12:49:23 +02:00
isc	Use unique names for probes.d files	2025-09-24 13:18:13 +02:00
isccc	replace the build system with meson	2025-06-11 10:30:12 +03:00
isccfg	rename cfg_aclconfctx_t variables to aclctx	2025-09-24 20:14:49 +02:00
ns	Use signer name when disabling DNSSEC algorithms	2025-09-25 11:14:27 +10:00
.gitignore	The isc/platform.h header has been completely removed	2021-07-06 05:33:48 +00:00
meson.build	replace the build system with meson	2025-06-11 10:30:12 +03:00