Commit f5e1e7343c for bind
commit f5e1e7343c554964a3460780d556ac956501bda2
Author: Matthijs Mekking <matthijs@isc.org>
Date: Fri Oct 9 17:11:45 2026 +0200
Use SEP key flag to determine full role string
When it comes to determining the full role string, used in comments in
public key files, use the SEP key flag mask to determine whether this
should be "key-signing" or "zone-signing".
diff --git a/bin/tests/system/isctest/kasp.py b/bin/tests/system/isctest/kasp.py
index 02f3d92577..5a749f230e 100644
--- a/bin/tests/system/isctest/kasp.py
+++ b/bin/tests/system/isctest/kasp.py
@@ -240,9 +240,9 @@ class KeyProperties:
return result
def role_full(self) -> str:
- if self.flags == 256:
- return "zone-signing"
- return "key-signing"
+ if (self.flags & KEYFLAG_SEP) != 0:
+ return "key-signing"
+ return "zone-signing"
def Ipub(self, config):
ipub = timedelta(0)