Matthijs Mekking cf0439cd5f Treat dnssec-policy "none" as a builtin zone ... Configure "none" as a builtin policy. Change the 'cfg_kasp_fromconfig' api so that the 'name' will determine what policy needs to be configured. When transitioning a zone from secure to insecure, there will be cases when a zone with no DNSSEC policy (dnssec-policy none) should be using KASP. When there are key state files available, this is an indication that the zone once was DNSSEC signed but is reconfigured to become insecure. If we would not run the keymgr, named would abruptly remove the DNSSEC records from the zone, making the zone bogus. Therefore, change the code such that a zone will use kasp if there is a valid dnssec-policy configured, or if there are state files available. (cherry picked from commit cf420b2af0)		2020-12-23 11:56:33 +01:00
..
bind9	Treat dnssec-policy "none" as a builtin zone	2020-12-23 11:56:33 +01:00
dns	Treat dnssec-policy "none" as a builtin zone	2020-12-23 11:56:33 +01:00
irs	Add libssl libraries to Windows build	2020-12-09 10:46:16 +01:00
isc	Only pick CPUs that are part of the existing CPU affinity set when	2020-12-23 09:21:29 +11:00
isccc	Add libssl libraries to Windows build	2020-12-09 10:46:16 +01:00
isccfg	Treat dnssec-policy "none" as a builtin zone	2020-12-23 11:56:33 +01:00
ns	Print warning when falling back to increment soa serial method	2020-12-12 07:55:29 +01:00
samples	Add libssl libraries to Windows build	2020-12-09 10:46:16 +01:00
win32/bindevt	update all copyright headers to eliminate the typo	2020-09-14 16:50:58 -07:00
.gitignore	added gitignore, removed cvsignore	2012-03-03 23:10:05 -08:00
Kyuafile	link in lib/isccc/tests/Kyuafile	2018-11-13 07:23:36 +11:00
Makefile.in	remove lib/tests as nothing uses it anymore	2018-03-09 14:12:50 -08:00