Matthijs Mekking 375112a623 Add built-in dnssec-policy "insecure" ... Add a new built-in policy "insecure", to be used to gracefully unsign a zone. Previously you could just remove the 'dnssec-policy' configuration from your zone statement, or remove it. The built-in policy "none" (or not configured) now actually means no DNSSEC maintenance for the corresponding zone. So if you immediately reconfigure your zone from whatever policy to "none", your zone will temporarily be seen as bogus by validating resolvers. This means we can remove the functions 'dns_zone_use_kasp()' and 'dns_zone_secure_to_insecure()' again. We also no longer have to check for the existence of key state files to figure out if a zone is transitioning to insecure. (cherry picked from commit 2710d9a11d)		2021-04-30 13:58:22 +02:00
..
bind9	Add built-in dnssec-policy "insecure"	2021-04-30 13:58:22 +02:00
dns	Add built-in dnssec-policy "insecure"	2021-04-30 13:58:22 +02:00
irs	Cleanup the isc_<*>mgr_createinc() constructors	2021-04-19 15:57:40 +02:00
isc	Cleanup the isc_<*>mgr_createinc() constructors	2021-04-19 15:57:40 +02:00
isccc	Use BIND 9.17 preprocessor macro to skip unit test	2021-02-17 12:09:25 +01:00
isccfg	Add built-in dnssec-policy "insecure"	2021-04-30 13:58:22 +02:00
ns	Handle DNAME lookup via itself	2021-04-29 11:12:38 +02:00
win32/bindevt	update all copyright headers to eliminate the typo	2020-09-14 16:50:58 -07:00
.gitignore	added gitignore, removed cvsignore	2012-03-03 23:10:05 -08:00
Kyuafile	link in lib/isccc/tests/Kyuafile	2018-11-13 07:23:36 +11:00
Makefile.in	move samples/resolve.c to bin/tests/system	2021-04-19 14:32:53 +02:00