Commit b612e38a authored by Tony Finch's avatar Tony Finch Committed by Ondřej Surý

Do not flush the cache for `rndc validation status`

And add a note to the man page that `rndc validation` flushes the
cache when the validation state is changed. (It is necessary to flush
the cache when turning on validation, to avoid continuing to use
cryptographically invalid data. It is probably wise to flush the cache
when turning off validation to recover from lameness problems.)
parent de368cdf
......@@ -11081,9 +11081,9 @@ named_server_validation(named_server_t *server, isc_lex_t *lex,
if ((ptr != NULL && strcasecmp(ptr, view->name) != 0)
|| strcasecmp("_bind", view->name) == 0)
continue;
CHECK(dns_view_flushcache(view, false));
if (set) {
CHECK(dns_view_flushcache(view, false));
view->enablevalidation = enable;
changed = true;
} else {
......
......@@ -1078,6 +1078,8 @@
<para>
Enable, disable, or check the current status of
DNSSEC validation. By default, validation is enabled.
The cache is flushed when validation is turned on or off
to avoid using data that might differ between states.
</para>
</listitem>
</varlistentry>
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment