From 05c69f4103f5f423f8c7edfe51d82b45cbef2b28 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Wed, 4 Mar 2026 15:14:14 +1100 Subject: [PATCH] Fix setting retire in dns_keymgr_key_init The wrong variable was passed to dst_key_gettime when attempting to set retire. --- lib/dns/keymgr.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/dns/keymgr.c b/lib/dns/keymgr.c index 704acca5ec..dd5b371afd 100644 --- a/lib/dns/keymgr.c +++ b/lib/dns/keymgr.c @@ -1733,8 +1733,8 @@ dns_keymgr_key_init(dns_dnsseckey_t *key, dns_kasp_t *kasp, isc_stdtime_t now, } goal_state = OMNIPRESENT; } - result = dst_key_gettime(key->key, DST_TIME_INACTIVE, &result); - if (result <= now && result == ISC_R_SUCCESS) { + result = dst_key_gettime(key->key, DST_TIME_INACTIVE, &retire); + if (retire <= now && result == ISC_R_SUCCESS) { dns_ttl_t ttlsig = dns_kasp_zonemaxttl(kasp, true); ttlsig += dns_kasp_zonepropagationdelay(kasp); if ((retire + ttlsig) <= now) {