From: Vladimír Čunát <redacted>
Date: Thu, 31 Jul 2025 06:55:46 +0000 (+0200)
Subject: knot-resolver: update DNSSEC root trust anchors
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=47f8b88f43c614b7f683dcdf941e47d4c1e45b98;p=openwrt-packages.git

knot-resolver: update DNSSEC root trust anchors

This is long overdue.  Honestly I dislike that packaging
is hardcoding it this way.  It's error-prone, as we can see.
Knot Resolver source does contain the up to date anchors,
and it also (optionally) installs them.  Still, I'm not up to
larger changes in OpenWrt packaging right now.

Signed-off-by: Vladimír Čunát <redacted>
---

diff --git a/net/knot-resolver/files/root.keys b/net/knot-resolver/files/root.keys
index 6ee35a498..3009e81f2 100644
--- a/net/knot-resolver/files/root.keys
+++ b/net/knot-resolver/files/root.keys
@@ -1 +1,2 @@
-. IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
+. IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
+. IN DS 38696 8 2 683D2D0ACB8C9B712A1948B27F741219298D0A450D612C483AF444A4C0FB2B16