Fallback to built in trust-anchors, managed-keys, or trusted-keys

if the bind.keys file cannot be parsed.

(cherry picked from commit d02a14c7)

CHANGES

+5465.	[func]		Fallback to built in trust-anchors, managed-keys, or
+			trusted-keys if the bindkeys-file (bind.keys) cannot
+			be parsed. [GL #1235]
+
 5463.	[bug]		Address potential NULL pointer dereference on out of
 			memory in dnstap.c. [GL #2010]
 

bin/named/server.c

@@ -7583,7 +7583,14 @@ load_configuration(const char *filename, ns_server_t *server,
 
 		result = cfg_parse_file(bindkeys_parser, server->bindkeysfile,
 					&cfg_type_bindkeys, &bindkeys);
-		CHECK(result);
+		if (result != ISC_R_SUCCESS) {
+			isc_log_write(ns_g_lctx, NS_LOGCATEGORY_GENERAL,
+				      NS_LOGMODULE_SERVER, ISC_LOG_INFO,
+				      "unable to parse '%s' error '%s'; using "
+				      "built-in keys instead",
+				      server->bindkeysfile,
+				      isc_result_totext(result));
+		}
 	} else {
 		isc_log_write(ns_g_lctx, NS_LOGCATEGORY_GENERAL,
 			      NS_LOGMODULE_SERVER, ISC_LOG_INFO,