Running 5.4.4, adding an NTA seems very straightforward:-
trust_anchors.set_insecure( {"fj"} )
trust_anchors.summary()
'fj. is
negative trust anchor
. 172800 DNSKEY 257 3 8
AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
; Valid: ; KeyTag:20326
'
What is the precise incantation to remove it when it is no longer required?
The following do not work:-
trust_anchors.remove('fj')
false
trust_anchors.remove('fj.')
false
trust_anchors.remove( {"fj"} )
false
Any help would be appreciated.
Also, does Knot Resolver allow an automatic timeout when setting NTAs as
Bind does?
---
Best wishes,
Matthew