Commit 34f7638e authored by Libor Peltan's avatar Libor Peltan Committed by Daniel Salzman

dnssec: fixed CSK->(KSK,ZSK) alg rollover

parent d44d2b82
...@@ -535,13 +535,10 @@ int knot_dnssec_key_rollover(kdnssec_ctx_t *ctx, zone_sign_reschedule_t *resched ...@@ -535,13 +535,10 @@ int knot_dnssec_key_rollover(kdnssec_ctx_t *ctx, zone_sign_reschedule_t *resched
reschedule->plan_ds_query = true; reschedule->plan_ds_query = true;
if (ret == KNOT_EOK) { if (ret == KNOT_EOK) {
reschedule->keys_changed = true; reschedule->keys_changed = true;
} if (!ctx->policy->singe_type_signing &&
}
if (!ctx->policy->singe_type_signing && ret == KNOT_EOK &&
!key_present(ctx, DNSKEY_FLAGS_ZSK)) { !key_present(ctx, DNSKEY_FLAGS_ZSK)) {
ret = generate_key(ctx, false, true, ctx->now, false); ret = generate_key(ctx, false, true, ctx->now, false);
if (ret == KNOT_EOK) { }
reschedule->keys_changed = true;
} }
} }
// algorithm rollover // algorithm rollover
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment