mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-27 12:02:10 -05:00
When generating a new salt, compare it with the previous NSEC3
paremeters to ensure the new parameters are different from the
previous ones.
This moves the salt generation call from 'bin/named/*.s' to
'lib/dns/zone.c'. When setting new NSEC3 parameters, you can set a new
function parameter 'resalt' to enforce a new salt to be generated. A
new salt will also be generated if 'salt' is set to NULL.
Logging salt with zone context can now be done with 'dnssec_log',
removing the need for 'dns_nsec3_log_salt'.
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| notes-9.16.0.rst | ||
| notes-9.16.1.rst | ||
| notes-9.16.2.rst | ||
| notes-9.16.3.rst | ||
| notes-9.16.4.rst | ||
| notes-9.16.5.rst | ||
| notes-9.16.6.rst | ||
| notes-9.16.7.rst | ||
| notes-9.16.8.rst | ||
| notes-9.16.9.rst | ||
| notes-current.rst | ||