daemon/lua/trust_anchors: don't crash when dealing with unknown algorhitm
- Apr 04, 2019
-
-
Petr Špaček authored -
-
Petr Špaček authored
-
Petr Špaček authored
User-friendly error message is intentionally at the end so users, typically looking at the last line in logs, can see immediatelly what happened.
-
Petr Špaček authored
Previous version would add the TA and then print error message, which is not expected.
-
-
-
-
-
-
-
It's impossible to add managed keysets unless ta_update is loaded, in which case ta_update.start() is called by trust_anchors.add_file(). On ta_update unload, previously managed keys are flagged as unmanaged.
-
-
-
-
-
Since DNSSEC is now enabled by default and always loads the keyfile_default specified during compilation, these options are obsolete. Use trust_anchors.add_file() in config file if you require this functionality.
-
-
-
-
Petr Špaček authored
-
Petr Špaček authored
It was unused since cleanup in trust_anchors and just cluttering the code.
-
+ tests Exracting RFC 5011 to separate module was a good opportunity for cleanup.
-
Petr Špaček authored
-
Petr Špaček authored
Previously a typo in keyfile path triggered re-bootstrap even if root TA was already installed.
-
Petr Špaček authored
This simple change makes it easier to follow what the code does.
-
-
-
-
-
-
-
-
-
-
-