Matthijs Mekking 5e3aef364f dnssec-signzone retain signature if key is offline ... Track inside the dns_dnsseckey structure whether we have seen the private key, or if this key only has a public key file. If the key only has a public key file, or a DNSKEY reference in the zone, mark the key 'pubkey'. In dnssec-signzone, if the key only has a public key available, consider the key to be offline. Any signatures that should be refreshed for which the key is not available, retain the signature. So in the code, 'expired' becomes 'refresh', and the new 'expired' is only used to determine whether we need to keep the signature if the corresponding key is not available (retaining the signature if it is not expired). In the 'keysthatsigned' function, we can remove: - key->force_publish = false; - key->force_sign = false; because they are redundant ('dns_dnsseckey_create' already sets these values to false).		2025-01-23 09:43:07 +00:00
..
dns	dnssec-signzone retain signature if key is offline	2025-01-23 09:43:07 +00:00
dst	Remove C++ support from the public header	2024-12-18 13:10:39 +01:00
irs	Remove C++ support from the public header	2024-12-18 13:10:39 +01:00
.clang-format	Add separate .clang-format files for headers	2020-02-14 09:31:05 +01:00