bin/59575: bind upgrade issues postinstall probably should help with

[mrg%eterna23.net@localhost]

>Number:         59575
>Category:       bin
>Synopsis:       bind upgrade issues postinstall probably should help with
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Aug 06 00:00:00 +0000 2025
>Originator:     matthew green
>Release:        -11 and -current
>Organization:
people's front against (bozotic) www (softwar foundation)
>Environment:
any
>Description:
while trying to start named on a couple of various hosts i've had the
same problems occur that are related to new / changed named.conf
issues.  there are two main issues:

- the /etc/namedb/keys subdir isn't created, causing named to abort
  during early start up

- the old dnssec-lookaside option has been removed

also, the newer one has these two lines added, maybe they should also
be added to named.confs?

       max-udp-size 1220;
       edns-udp-size 1220;

>How-To-Repeat:
install older netbsd, upgrade to -current or -11, try to start named.
>Fix:
- postinstall should create /etc/namedb/keys is missing.

- postinstall should either automatically remove or explicitly fail if
  it finds the dnssec-lookaside option in named.conf

- possibly, postinstall should be patched to add the udp-size options.