Report information
The Basics
Id:
46774
Status:
resolved
Priority:
Low/Low
Queue:

People
BugTracker
Version Fixed:
9.9.12, 9.9.12(sub), 9.10.7, 9.10.7(sub), 9.11.3, 9.12.0
Version Found:
(no value)
Versions Affected:
(no value)
Versions Planned:
(no value)
Priority:
P2 Normal
Severity:
S2 Normal
CVSS Score:
(no value)
CVE ID:
(no value)
Component:
(no value)
Area:
bug

Dates
Created:Mon, 04 Dec 2017 19:14:14 -0500
Updated:Wed, 06 Dec 2017 12:32:54 -0500
Closed:Wed, 06 Dec 2017 12:32:54 -0500



This bug tracker is no longer active.

Please go to our Gitlab to submit issues (both feature requests and bug reports) for active projects maintained by Internet Systems Consortium (ISC).

Due to security and confidentiality requirements, full access is limited to the primary maintainers.

Subject: zone.c:zone_sign fails to properly determine active keys.
From: marka@isc.org
To: bind9-public@isc.org
Date: Mon, 04 Dec 2017 14:14:14 -1000
ready for review
4839. [bug] zone.c:zone_sign was not properly determining if there were active KSK and ZSK keys for a algorithm when update-check-ksk is true (default) leaving records unsigned with one or more DNSKEY algorithms. [RT #46774]