e0dae21 Add SSHFP update policy for existing zones

Authored and Committed by mkosek 12 years ago
    Add SSHFP update policy for existing zones
    
    SSH public key support includes a feature to automatically add/update
    client SSH fingerprints in SSHFP records. However, the update won't
    work for zones created before this support was added as they don't
    allow clients to update SSHFP records in their update policies.
    
    This patch lets dns upgrade module extend the original policy
    to allow the SSHFP dynamic updates. It updates only original
    policy, we don't want it to overwrite custom user policies.
    
    https://fedorahosted.org/freeipa/ticket/2394
    
        
file modified
+18 -0