Log DNSSEC trust anchors at startup.

This commit is contained in:
Simon Kelley
2018-07-20 21:23:56 +01:00
parent f3e57877ed
commit 3b6eb197a8

View File

@@ -771,6 +771,7 @@ int main (int argc, char **argv)
if (option_bool(OPT_DNSSEC_VALID))
{
int rc;
struct ds_config *ds;
/* Delay creating the timestamp file until here, after we've changed user, so that
it has the correct owner to allow updating the mtime later.
@@ -792,6 +793,10 @@ int main (int argc, char **argv)
if (rc == 1)
my_syslog(LOG_INFO, _("DNSSEC signature timestamps not checked until system time valid"));
for (ds = daemon->ds; ds; ds = ds->next)
my_syslog(LOG_INFO, _("configured with trust anchor for %s keytag %u"),
ds->name[0] == 0 ? "<root>" : ds->name, ds->keytag);
}
#endif