mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-01 06:55:30 +00:00
Code Issues Releases Wiki Activity

Clarify dnssec-signzone interval option

Browse Source 
There was confusion about whether the interval was calculated from
the validity period provided on the command line (with -s and -e),
or from the signature being replaced.

Add text to clarify that the interval is calculated from the new
validity period.
This commit is contained in:
Matthijs Mekking
2025-01-15 13:47:48 +01:00
parent 8efb4e2f26
commit ae42fa69fa
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
bin/dnssec/dnssec-signzone.rst
View File

@@ -174,6 +174,11 @@ Options
days. Therefore, if any existing RRSIG records are due to expire in days. Therefore, if any existing RRSIG records are due to expire in
less than 7.5 days, they are replaced. less than 7.5 days, they are replaced.
Note that the calculation of cycle interval is based upon the validity
period of the replacement signatures that would be generated by
``dnssec-signzone``, not on the valid lifetimes of the input RRSIGs being
considered for pre-expiry replacement.
.. option:: -I input-format .. option:: -I input-format
This option sets the format of the input zone file. Possible formats are This option sets the format of the input zone file. Possible formats are