diff --git a/CHANGES b/CHANGES
index 845853a5e1..4c2be4eca5 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+4301.	[bug]		dnssec-settime -p [DP]sync was not working. [RT #41534]
+
 4300.	[bug]		A flag could be set in the wrong field when setting
 			up nonrecursive queries; this could cause the
 			SERVFAIL cache to cache responses it shouldn't.
diff --git a/bin/dnssec/dnssec-settime.c b/bin/dnssec/dnssec-settime.c
index 3a26550c41..33328cd502 100644
--- a/bin/dnssec/dnssec-settime.c
+++ b/bin/dnssec/dnssec-settime.c
@@ -218,8 +218,8 @@ main(int argc, char **argv) {
 					printcreate = ISC_TRUE;
 					break;
 				case 'P':
-					if (!strncmp(p, "sync", 3)) {
-						p += 3;
+					if (!strncmp(p, "sync", 4)) {
+						p += 4;
 						printsyncadd = ISC_TRUE;
 						break;
 					}
@@ -235,8 +235,8 @@ main(int argc, char **argv) {
 					printinact = ISC_TRUE;
 					break;
 				case 'D':
-					if (!strncmp(p, "sync", 3)) {
-						p += 3;
+					if (!strncmp(p, "sync", 4)) {
+						p += 4;
 						printsyncdel = ISC_TRUE;
 						break;
 					}