989d921f5d
I'm very pleased to announce the release of our new website and documentation using the new toolchain with Hugo and AsciiDoctor. To get more information about the new toolchain please read the FreeBSD Documentation Project Primer[1], Hugo docs[2] and AsciiDoctor docs[3]. Acknowledgment: Benedict Reuschling <bcr@> Glen Barber <gjb@> Hiroki Sato <hrs@> Li-Wen Hsu <lwhsu@> Sean Chittenden <seanc@> The FreeBSD Foundation [1] https://docs.FreeBSD.org/en/books/fdp-primer/ [2] https://gohugo.io/documentation/ [3] https://docs.asciidoctor.org/home/ Approved by: doceng, core
26 lines
714 B
Diff
26 lines
714 B
Diff
Index: contrib/bind9/lib/dns/zone.c
|
|
===================================================================
|
|
--- contrib/bind9/lib/dns/zone.c (revision 278973)
|
|
+++ contrib/bind9/lib/dns/zone.c (working copy)
|
|
@@ -8496,6 +8496,12 @@ keyfetch_done(isc_task_t *task, isc_event_t *event
|
|
namebuf, tag);
|
|
trustkey = ISC_TRUE;
|
|
}
|
|
+ } else {
|
|
+ /*
|
|
+ * No previously known key, and the key is not
|
|
+ * secure, so skip it.
|
|
+ */
|
|
+ continue;
|
|
}
|
|
|
|
/* Delete old version */
|
|
@@ -8544,7 +8550,7 @@ keyfetch_done(isc_task_t *task, isc_event_t *event
|
|
trust_key(zone, keyname, &dnskey, mctx);
|
|
}
|
|
|
|
- if (!deletekey)
|
|
+ if (secure && !deletekey)
|
|
set_refreshkeytimer(zone, &keydata, now);
|
|
}
|
|
|