resolvectl: support JSON output for openpgp and tlsa

The openpgp and tlsa verbs rejected --json= even though they already determine the RR type they query. Allow JSON output for these shortcut commands. Accept matching explicit --type= values as well, but reject mismatched types so openpgp only queries OPENPGPKEY records and tlsa only queries TLSA records. Refuse unauthenticated key records in JSON format so scripts do not accidentally consume cryptographic DNS data that would only produce a warning in human-readable output. Fixes #43245
2026-08-04 08:08:33 +09:00
parent 1652be7df8
commit 05ea7e87b6
6 changed files with 89 additions and 16 deletions
@@ -24,3 +24,5 @@ mail                  A    10.0.0.122
 myservice             A    10.0.0.123
                      AAAA fd00:dead:beef:cafe::123
 _mysvc._tcp           SRV  10 5 1234 myservice
+
+5a786cdc59c161cdafd818143705026636962198c66ed4c5b3da321e._openpgpkey OPENPGPKEY AAECAw==