2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 14:35:26 +00:00

Merge branch 'matthijs-fix-kasp-test-next-key-event' into 'main'

Update check next key events after rndc checkds

See merge request isc-projects/bind9!3937
This commit is contained in:
Matthijs Mekking
2020-08-13 10:04:10 +00:00

View File

@@ -3681,8 +3681,13 @@ dnssec_verify
# successor signatures. This is the retire interval: Dsgn plus the
# maximum zone TTL plus the zone propagation delay plus retire-safety. For the
# csk-roll2 policy that means: 12h (because 1d validity and refresh within
# 12 hours) + 1d + 1h + 1h = 38h = 136800 seconds.
check_next_key_event 136800
# 12 hours) + 1d + 1h + 1h = 38h = 136800 seconds. Prevent intermittent false
# positives on slow platforms by subtracting the number of seconds which
# passed between key creation and invoking 'rndc dnssec -checkds'.
now="$(TZ=UTC date +%s)"
time_passed=$((now-start_time))
next_time=$((136800-time_passed))
check_next_key_event $next_time
#
# Zone: step4.csk-roll2.autosign.