bind9/lib
Matthijs Mekking ef671919d5 Fix a small keymgr bug
While converting the kasp system test to pytest, I encountered a small
bug in the keymgr code. We retire keys when there is more than one
key matching a 'keys' line from the dnssec-policy. But if there are
multiple identical 'keys' lines, as is the case for the test zone
'checkds-doubleksk.kasp', we retire one of the two keys that have the
same properties.

Fix this by checking if there are double matches. This is not fool proof
because there may be many keys for a few identical 'keys' lines, but it
is good enough for now. In practice it makes no sense to have a policy
that dictates multiple keys with identical properties.
2025-03-20 10:12:16 +00:00
..
dns Fix a small keymgr bug 2025-03-20 10:12:16 +00:00
isc Add the call function tracking to isc_mem API 2025-03-05 11:17:17 +01:00
isccc Remove unused symtab implementation 2025-02-25 11:29:58 +01:00
isccfg unify fips handling to isc_crypto and make the toggle one way 2025-02-27 17:37:43 +03:00
ns Implement -T cookiealwaysvalid 2025-03-17 10:42:47 +00:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
Makefile.am Move irs_resconf into libdns and remove libirs 2023-02-24 09:38:59 +00:00