Bug 1889902

Description of problem:

Noted and fixed upstream, resigning stops.

Upstream bug is here:

https://gitlab.isc.org/isc-projects/bind9/-/issues/1627

As this is relatively new, it probably impacts RHEL 8 as well, but I have 
yet to confirm this given a missing build dependency issue I'm chasing down 
separately.

The fix, from upstream, is:

diff --git a/lib/dns/zone.c b/lib/dns/zone.c
index 3ef2394a5a..4ceff1caff 100644
--- a/lib/dns/zone.c
+++ b/lib/dns/zone.c
@@ -4999,6 +4999,14 @@ zone_postload(dns_zone_t *zone, dns_db_t *db, isc_time_t loadtime,
            DNS_ZONE_FLAG(zone->secure, DNS_ZONEFLG_LOADED))
        {
                DNS_ZONE_CLRFLAG(zone->secure, DNS_ZONEFLG_LOADPENDING);
+               /*
+                * Re-start zone maintenance if it had been stalled
+                * due to DNS_ZONEFLG_LOADPENDING being set when
+                * zone_maintenance was called.
+                */
+               if (zone->secure->task != NULL) {
+                       zone_settimer(zone->secure, &now);
+               }
        }

I don't see that zone->secure->task check anywhere in our source, nor do I 
see the comment.