upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-04 17:52:04 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 6

Merge branch '2383-kasp-sig-validity-dnskey-bug' into 'main'

Browse source 
Fix signatures-validity config option

Closes #2383

See merge request isc-projects/bind9!4543
This commit is contained in:
Matthijs Mekking 2021-01-12 11:22:22 +00:00
commit 739a5ea135
3 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
CHANGES
View file

@ -1,3 +1,7 @@
5561. [bug] KASP incorrectly set signature validity to the value
of the DNSKEY signature validity. This is now fixed.
[GL #2383]
5560. [func] The default value of "max-stale-ttl" has been changed
from 12 hours to 1 day and the default value of
"stale-answer-ttl" has been changed from 1 second to

3
doc/notes/notes-current.rst
View file

@ -65,3 +65,6 @@ Bug Fixes
- Prevent rbtdb instances being destroyed by multiple threads at the same
time. This can trigger assertion failures. [GL #2355]
- KASP incorrectly set signature validity to the value of the DNSKEY signature
validity. This is now fixed. [GL #2383]

2
lib/dns/kasp.c
View file

@ -184,7 +184,7 @@ dns_kasp_setsigvalidity_dnskey(dns_kasp_t *kasp, uint32_t value) {
REQUIRE(DNS_KASP_VALID(kasp));
REQUIRE(!kasp->frozen);
kasp->signatures_validity = value;
kasp->signatures_validity_dnskey = value;
}
dns_ttl_t