Problem upgrading to 9.18 - important feature being removed

[Ondřej Surý]

Carsten, could you please fill a feature request in the GitLab?

Thanks,
--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.

> On 27. 2. 2024, at 16:06, Carsten Strotmann via bind-users <bind-users at lists.isc.org> wrote:
> 
> Hi Matthijs,
> 
>> On 27 Feb 2024, at 15:54, Matthijs Mekking wrote:
>> 
>> - When migrating to dnssec-policy, make sure the configuration matches your existing keys.
> 
> the most problems I've seen so far have to do with this step: admins "think" they have created a configuration that matches the current keys, but they haven't (for one reason or other, it happens for me, despite working a lot with DNSSEC and BIND 9).
> 
> It would be nice to have a "dry-run" mode in BIND 9, where BIND 9 would report steps it would do because of "dnssec-policy", but will not execute the changes.
> 
> That way, admins can create a configuration with "dry-run" mode enabled, check the logfiles, and if the actions in the log-file match the expectations, the "dry-run" mode can be removed and the new configuration will become active.
> 
> Greetings
> 
> Carsten
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users