diff --git a/lib/bind9/check.c b/lib/bind9/check.c index ee00d2482a..464797e8a3 100644 --- a/lib/bind9/check.c +++ b/lib/bind9/check.c @@ -890,6 +890,9 @@ kasp_name_allowed(const cfg_listelt_t *element) { if (strcmp("none", name) == 0) { return (false); } + if (strcmp("insecure", name) == 0) { + return (false); + } if (strcmp("default", name) == 0) { return (false); } diff --git a/lib/dns/zone.c b/lib/dns/zone.c index 5b8f14c3f2..9553ade3e8 100644 --- a/lib/dns/zone.c +++ b/lib/dns/zone.c @@ -20078,8 +20078,7 @@ zone_rekey(dns_zone_t *zone) { /* * Only update DNSKEY TTL if we have a policy. */ - if (kasp != NULL && strcmp(dns_kasp_getname(kasp), "none") != 0) - { + if (kasp != NULL) { ttl = dns_kasp_dnskeyttl(kasp); }