Commit 17f731bf authored by Daniel Salzman's avatar Daniel Salzman

Merge branch 'stss_present' into 'master'

Stss present

See merge request !858
parents 176edefb 5a4280cb
......@@ -69,7 +69,7 @@ static unsigned algorithm_present(const kdnssec_ctx_t *ctx, uint8_t alg)
static bool signing_scheme_present(const kdnssec_ctx_t *ctx)
if (ctx->policy->singe_type_signing) {
return key_present(ctx, true, true);
return (!key_present(ctx, true, false) || !key_present(ctx, false, true));
} else {
return (key_present(ctx, true, false) && key_present(ctx, false, true));
......@@ -28,7 +28,7 @@ knot.gen_key(zones[2], ksk=True, alg="ECDSAP384SHA384", key_len="384")
for zone in zones[:-1]:
knot.dnssec(zone).enable = True
knot.dnssec(zone).manual = True
knot.dnssec(zone).single_type_signing = True
# enable automatic Single-Type signing scheme with NSEC3 on the last zone
knot.dnssec(zones[-1]).enable = True
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment