Matthijs Mekking 5e3aef364f dnssec-signzone retain signature if key is offline ... Track inside the dns_dnsseckey structure whether we have seen the private key, or if this key only has a public key file. If the key only has a public key file, or a DNSKEY reference in the zone, mark the key 'pubkey'. In dnssec-signzone, if the key only has a public key available, consider the key to be offline. Any signatures that should be refreshed for which the key is not available, retain the signature. So in the code, 'expired' becomes 'refresh', and the new 'expired' is only used to determine whether we need to keep the signature if the corresponding key is not available (retaining the signature if it is not expired). In the 'keysthatsigned' function, we can remove: - key->force_publish = false; - key->force_sign = false; because they are redundant ('dns_dnsseckey_create' already sets these values to false).		2025-01-23 09:43:07 +00:00
..
startperf	Reformat shell scripts with shfmt	2023-10-26 10:23:50 +02:00
system	dnssec-signzone retain signature if key is offline	2025-01-23 09:43:07 +00:00
testdata/wire	move all optional tests from bin/tests to bin/tests/optional	2018-03-09 14:12:47 -08:00
.gitignore	Move environment variables from conf.sh to pytest	2024-05-09 17:08:08 +02:00
convert-trs-to-junit.py	Use python3 in shebang lines for util scripts	2024-08-14 17:22:22 +02:00
Makefile.am	Fix JUnit test status generator for out-of-tree system tests	2022-09-22 15:20:23 +02:00
test_client.c	TLS SNI - add low level support for SNI to the networking code	2024-12-26 17:23:12 +02:00
test_server.c	Remove redundant parentheses from the return statement	2024-11-19 12:27:22 +01:00
wire_test.c	Finalize removal of memory debug flags size and mctx	2024-12-06 02:29:20 +00:00