upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-10 17:27:33 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

dnssec: use less-or-equal when looking at SyncPublish time

Browse source 
If we created a key, mark its SyncPublish time as 'now' and started
bind the key might not be published if the SyncPublish time is in
the same second as the time the zone is loaded. This is mostly
for dnssec system test, as this kind of scenario is very unlikely
in a real world environment.
This commit is contained in:
Witold Kręcicki 2020-01-21 14:20:19 +01:00
parent 4a26f7d149
commit 741bc11bdb
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/dns/dnssec.c
View file

@ -673,7 +673,7 @@ syncpublish(dst_key_t *key, isc_stdtime_t now) {
/* If no kasp state, check timings. */
publish = false;
result = dst_key_gettime(key, DST_TIME_SYNCPUBLISH, &when);
if (result == ISC_R_SUCCESS && when < now) {
if (result == ISC_R_SUCCESS && when <= now) {
publish = true;
}
result = dst_key_gettime(key, DST_TIME_SYNCDELETE, &when);