mirror of
https://github.com/systemd/systemd.git
synced 2026-08-09 09:32:04 +00:00
The openpgp and tlsa verbs rejected --json= even though they already determine the RR type they query. Allow JSON output for these shortcut commands. Accept matching explicit --type= values as well, but reject mismatched types so openpgp only queries OPENPGPKEY records and tlsa only queries TLSA records. Refuse unauthenticated key records in JSON format so scripts do not accidentally consume cryptographic DNS data that would only produce a warning in human-readable output. Fixes #43245