mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-03 16:15:27 +00:00
Code Issues Releases Wiki Activity

Fix signatures-validity config option

Browse Source 
KASP was using 'signatures-validity-dnskey' instead of
'signatures-validity'.
This commit is contained in:
Matthijs Mekking
2021-01-07 17:41:38 +01:00
parent 031cc284fc
commit ad63e9e4f8
3 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
CHANGES
View File

@@ -1,3 +1,7 @@
5561. [bug] KASP incorrectly set signature validity to the value
of the DNSKEY signature validity. This is now fixed.
[GL #2383]
5560. [func] The default value of "max-stale-ttl" has been changed 5560. [func] The default value of "max-stale-ttl" has been changed
from 12 hours to 1 day and the default value of from 12 hours to 1 day and the default value of
"stale-answer-ttl" has been changed from 1 second to "stale-answer-ttl" has been changed from 1 second to

3
doc/notes/notes-current.rst
View File

@@ -65,3 +65,6 @@ Bug Fixes
- Prevent rbtdb instances being destroyed by multiple threads at the same - Prevent rbtdb instances being destroyed by multiple threads at the same
time. This can trigger assertion failures. [GL #2355] time. This can trigger assertion failures. [GL #2355]
- KASP incorrectly set signature validity to the value of the DNSKEY signature
validity. This is now fixed. [GL #2383]

2
lib/dns/kasp.c
View File

@@ -184,7 +184,7 @@ dns_kasp_setsigvalidity_dnskey(dns_kasp_t *kasp, uint32_t value) {
REQUIRE(DNS_KASP_VALID(kasp)); REQUIRE(DNS_KASP_VALID(kasp));
REQUIRE(!kasp->frozen); REQUIRE(!kasp->frozen);
kasp->signatures_validity = value; kasp->signatures_validity_dnskey = value;
} }
dns_ttl_t dns_ttl_t