mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-28 04:21:07 -05:00
If we have a CDS or CDNSKEY we at least need to have a DNSKEY with the same algorithm published and signing the CDS RRset. Same for CDNSKEY of course. This relaxes the zone_cdscheck function, because before the CDS or CDNSKEY had to match a DNSKEY, now only the algorithm has to match. This allows a provider in a multisigner model to update the CDS/CDNSKEY RRset in the zone that is served by the other provider. |
||
|---|---|---|
| .. | ||
| bind9 | ||
| dns | ||
| irs | ||
| isc | ||
| isccc | ||
| isccfg | ||
| ns | ||
| .gitignore | ||
| Makefile.am | ||
| unit-test-driver.sh.in | ||