[v9_11] de-DLV 4749. [func] The ISC DLV service has been shut down, and all DLV records have been removed from dlv.isc.org. - Removed references to ISC DLV in documentation - Removed DLV key from bind.keys - No longer use ISC DLV by default in delv [RT #46155]

[v9_11] revised comment

[v9_11] Remove obsolete Id lines that showed old date on generated bind.keys.h

4564. [maint] Update the built in managed keys to include the upcoming root KSK. [RT #44579] (cherry picked from commit 00a83c64d71137d415ce4f743d28e1d10621adaf)

3001. [func] Added a default trust anchor for the root zone, which can be switched on by setting "dnssec-validation auto;" in the named.conf options. [RT #21727]

cvs version identifier

Respinning to fix memory leak in dnssec-signzone. (Also adopting doc changes.)

Update comment, since the key isn't actually going to expire in 9/2009 after all.

2665. [func] Clarify syntax for managed-keys {} statement, add ARM documentation about RFC 5011 support. [RT #19874]

2572. [func] Simplify DLV configuration, with a new option "dnssec-lookaside auto;" This is the equivalent of "dnssec-lookaside . trust-anchor dlv.isc.org;" plus setting a trusted-key for dlv.isc.org. Note: The trusted key is hard-coded into named, but is also stored in (and can be overridden by) $sysconfdir/bind.keys. As the ISC DLV key rolls over it can be kept up to date by replacing the bind.keys file with a key downloaded from https://www.isc.org/solutions/dlv. [RT #18685]