diff options
| author | Tom Gundersen <teg@jklm.no> | 2016-01-07 15:05:58 +0100 |
|---|---|---|
| committer | Tom Gundersen <teg@jklm.no> | 2016-01-07 15:05:58 +0100 |
| commit | 4b4310db942b56f5813ea6db68037cf4447e4aa0 (patch) | |
| tree | d6594eed934e46a50a41f0c93836cba45011723c /man/dnssec-trust-anchors.d.xml | |
| parent | a2e9fd6233183b3dc439f9411709c62d11bfdc1c (diff) | |
| parent | 28bf03b5265be30079630b5bc2c3dafc13fce27b (diff) | |
Merge pull request #2276 from poettering/dnssec12
Twelfth DNSSEC PR
Diffstat (limited to 'man/dnssec-trust-anchors.d.xml')
| -rw-r--r-- | man/dnssec-trust-anchors.d.xml | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/man/dnssec-trust-anchors.d.xml b/man/dnssec-trust-anchors.d.xml index 9a7cf3c881..51271abc16 100644 --- a/man/dnssec-trust-anchors.d.xml +++ b/man/dnssec-trust-anchors.d.xml @@ -175,6 +175,16 @@ <para><ulink url="https://tools.ietf.org/html/rfc7646">RFC 7646</ulink> for details on negative trust anchors.</para> + + <para>If no negative trust anchor files are configured a built-in + set of well-known private DNS zone domains is used as negative + trust anchors.</para> + + <para>It is also possibly to define per-interface negative trust + anchors using the <varname>DNSSECNegativeTrustAnchors=</varname> + setting in + <citerefentry><refentrytitle>systemd.network</refentrytitle><manvolnum>5</manvolnum></citerefentry> + files.</para> </refsect1> <refsect1> @@ -182,7 +192,8 @@ <para> <citerefentry><refentrytitle>systemd</refentrytitle><manvolnum>1</manvolnum></citerefentry>, <citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>, - <citerefentry><refentrytitle>resolved.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry> + <citerefentry><refentrytitle>resolved.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry>, + <citerefentry><refentrytitle>systemd.network</refentrytitle><manvolnum>5</manvolnum></citerefentry> </para> </refsect1> |