bind9/bin/dnssec
Matthijs Mekking 9fe520ece9 Implement named-checkconf -k (check keys)
With named-checkconf -k you can check your configuration including
checking the dnssec-policy keys against the configured keystores. If
there is a mismatch in the key files versus the policy, named-checkconf
will fail. This is useful for running before migrating to dnssec-policy.

For logging purposes, introduce a function that writes the identifying
information about a policy key into a string.

Allow a dnssec key to be initialized outside the keymgr code.

Add 'log_errors' to 'cfg_kasp_fromconfig' to avoid duplicate error
logs.
2025-09-24 17:03:06 +02:00
..
.gitignore Introduce new DNSSEC tool dnssec-ksr 2024-04-19 10:41:04 +02:00
dnssec-cds.c Use ControlStatementsExceptControlMacros for SpaceBeforeParens 2025-08-19 07:58:33 +02:00
dnssec-cds.rst Add internal hyperlinks to See Also section of manual pages 2022-03-14 10:46:36 +01:00
dnssec-dsfromkey.c Use ControlStatementsExceptControlMacros for SpaceBeforeParens 2025-08-19 07:58:33 +02:00
dnssec-dsfromkey.rst Update man pages for deprecated algorithms 2025-07-15 23:53:57 +10:00
dnssec-importkey.c Use ControlStatementsExceptControlMacros for SpaceBeforeParens 2025-08-19 07:58:33 +02:00
dnssec-importkey.rst Teach dnssec-settime to read unset times that it writes 2022-05-17 16:28:40 +02:00
dnssec-keyfromlabel.c Change the 'isc_g_mctx' to be always available 2025-08-04 11:29:50 +02:00
dnssec-keyfromlabel.rst Update man pages for deprecated algorithms 2025-07-15 23:53:57 +10:00
dnssec-keygen.c Use ControlStatementsExceptControlMacros for SpaceBeforeParens 2025-08-19 07:58:33 +02:00
dnssec-keygen.rst Update man pages for deprecated algorithms 2025-07-15 23:53:57 +10:00
dnssec-ksr.c dns_rdatalist functions are not for general use 2025-09-15 16:11:50 +00:00
dnssec-ksr.rst dnssec-ksr keygen -o to create KSKs 2024-11-01 15:50:16 +01:00
dnssec-revoke.c Change the 'isc_g_mctx' to be always available 2025-08-04 11:29:50 +02:00
dnssec-revoke.rst Remove OpenSSL Engine support 2024-08-06 15:17:48 +02:00
dnssec-settime.c Change the 'isc_g_mctx' to be always available 2025-08-04 11:29:50 +02:00
dnssec-settime.rst Remove OpenSSL Engine support 2024-08-06 15:17:48 +02:00
dnssec-signzone.c Remove dns_dbtree_t and its usage 2025-09-17 15:58:44 +02:00
dnssec-signzone.rst Fix broken links in documentation 2025-01-24 12:07:36 +01:00
dnssec-verify.c Change the 'isc_g_mctx' to be always available 2025-08-04 11:29:50 +02:00
dnssec-verify.rst Remove OpenSSL Engine support 2024-08-06 15:17:48 +02:00
dnssectool.c Implement named-checkconf -k (check keys) 2025-09-24 17:03:06 +02:00
dnssectool.h Unify handling of the program name in all the utilities 2025-05-29 06:17:32 +02:00
meson.build replace the build system with meson 2025-06-11 10:30:12 +03:00