bind9/bin
Matthijs Mekking cf0439cd5f Treat dnssec-policy "none" as a builtin zone
Configure "none" as a builtin policy. Change the 'cfg_kasp_fromconfig'
api so that the 'name' will determine what policy needs to be
configured.

When transitioning a zone from secure to insecure, there will be
cases when a zone with no DNSSEC policy (dnssec-policy none) should
be using KASP. When there are key state files available, this is an
indication that the zone once was DNSSEC signed but is reconfigured
to become insecure.

If we would not run the keymgr, named would abruptly remove the
DNSSEC records from the zone, making the zone bogus. Therefore,
change the code such that a zone will use kasp if there is a valid
dnssec-policy configured, or if there are state files available.

(cherry picked from commit cf420b2af0)
2020-12-23 11:56:33 +01:00
..
check Add libssl libraries to Windows build 2020-12-09 10:46:16 +01:00
confgen Add libssl libraries to Windows build 2020-12-09 10:46:16 +01:00
delv Add libssl libraries to Windows build 2020-12-09 10:46:16 +01:00
dig Add libssl libraries to Windows build 2020-12-09 10:46:16 +01:00
dnssec Treat dnssec-policy "none" as a builtin zone 2020-12-23 11:56:33 +01:00
named Treat dnssec-policy "none" as a builtin zone 2020-12-23 11:56:33 +01:00
nsupdate Add libssl libraries to Windows build 2020-12-09 10:46:16 +01:00
pkcs11 Add libssl libraries to Windows build 2020-12-09 10:46:16 +01:00
plugins update all copyright headers to eliminate the typo 2020-09-14 16:50:58 -07:00
python Fix program name reference in dnssec-keymgr(8) 2020-12-14 13:17:27 +01:00
rndc Add libssl libraries to Windows build 2020-12-09 10:46:16 +01:00
tests Treat dnssec-policy "none" as a builtin zone 2020-12-23 11:56:33 +01:00
tools Handle shared library platforms that don't support inter library dependancies 2020-12-20 21:36:09 +00:00
win32/BINDInstall Add libssl libraries to Windows build 2020-12-09 10:46:16 +01:00
Makefile.in name change from "hook modules" to "plugins" 2018-12-06 10:36:50 -08:00