Commit 11d3a37202 for bind

commit 11d3a372027493ee485e8c39734b09fa31c42fbf
Merge: 84e2f4f93a 021ea1508f
Author: Nicki Křížek <nicki@isc.org>
Date:   Thu Oct 8 14:35:13 2026 +0200

    fix: usr: Fix Offline KSK signing when the KSK and a ZSK share a key tag

    With dnssec-policy offline-ksk, the KSK and the ZSKs are generated separately, so a ZSK can have the same key tag as the KSK. named then mistook the ZSK for the KSK when signing the zone: the DNSKEY RRset was left without the KSK signature from the imported SKR, or, depending on the signing algorithm, importing the SKR failed with a "not exact" error. This has been fixed.

    Closes #5540

    Merge branch '5540-match-key-files-to-dnskeys' into 'main'

    See merge request isc-projects/bind9!12893