9 Commits

Author	SHA1	Message	Date
Evan Hunt	44e087b646	[master] revised comment	2017-02-04 00:24:06 -08:00
Evan Hunt	2899fa37d2	[master] Remove obsolete Id lines that showed old date on generated bind.keys.h	2017-02-02 11:16:23 -08:00
Mark Andrews	00a83c64d7	4564. [maint] Update the built in managed keys to include the ... upcoming root KSK. [RT #44579]	2017-02-02 17:32:23 +11:00
Evan Hunt	79bf7c874b	3001. [func] Added a default trust anchor for the root zone, which ... can be switched on by setting "dnssec-validation auto;" in the named.conf options. [RT #21727]	2011-01-03 23:45:08 +00:00
Mark Andrews	1154295949	cvs version identifier	2010-06-20 07:15:28 +00:00
Evan Hunt	8f7de3db7e	Respinning to fix memory leak in dnssec-signzone. (Also adopting doc changes.)	2009-10-16 02:59:41 +00:00
Evan Hunt	8036473e6c	Update comment, since the key isn't actually going to expire in 9/2009 ... after all.	2009-09-09 15:44:33 +00:00
Evan Hunt	85be60e3c8	2665. [func] Clarify syntax for managed-keys {} statement, add ... ARM documentation about RFC 5011 support. [RT #19874]	2009-09-01 07:14:26 +00:00
Evan Hunt	3a30493983	2572. [func] Simplify DLV configuration, with a new option ... "dnssec-lookaside auto;" This is the equivalent of "dnssec-lookaside . trust-anchor dlv.isc.org;" plus setting a trusted-key for dlv.isc.org. Note: The trusted key is hard-coded into named, but is also stored in (and can be overridden by) $sysconfdir/bind.keys. As the ISC DLV key rolls over it can be kept up to date by replacing the bind.keys file with a key downloaded from https://www.isc.org/solutions/dlv. [RT #18685]	2009-03-04 02:42:31 +00:00