Skip to content
  • Matthijs Mekking's avatar
    Fix race condition dnssec-policy with views · e0bdff7e
    Matthijs Mekking authored
    When configuring the same dnssec-policy for two zones with the same
    name but in different views, there is a race condition for who will
    run the keymgr first. If running sequential only one set of keys will
    be created, if running parallel two set of keys will be created.
    
    Lock the kasp when running looking for keys and running the key
    manager. This way, for the same zone in different views only one
    keyset will be created.
    
    The dnssec-policy does not implement sharing keys between different
    zones.
    e0bdff7e