Commit Graph

1 Commits

Author SHA1 Message Date
Petr Menšík
fa95441ced Still start if inline-signing and dyn. updates are not set
Attempts to modify behaviour done in 9.16.33. It requires explicit
specification of inline-signing yes for any zone, which has specified
dnssec-policy. For primary zones also when  allow-update and
update-policy are disabled. Turn it into warning only on RHEL builds,
do not prevent starting of named.

That should roughly emulate error message present on 9.16.23:
'inline-signing;' cannot be set to 'no' if dnssec-policy is also set on
a non-dynamic DNS zone.

But point a link into upstream KB article in any case. This has appeared
only when inline-signing were specified in a zone block. For that case
make it still fatal, but with new message.

https://downloads.isc.org/isc/bind9/9.16.50/doc/arm/html/notes.html#known-issues

Related to upstream commit 30fceec069ae0942749e6aa783f67756e82fcaae.

Resolves: RHEL-6454
2026-07-07 14:37:42 +02:00