upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-11 06:19:59 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Fix off by one error in dnssec-ksr sign

Browse source 
If the inception time of the signature is exactly equal to the
inactive time of the key, still include the signature. Otherwise there
may be corner cases where signatures are omitted erroneously.

(cherry picked from commit bc6dad585d)
This commit is contained in:
Matthijs Mekking 2026-04-02 10:01:27 +02:00
parent 6d89bfdf03
commit ad45cdd383
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
bin/dnssec/dnssec-ksr.c
View file

@ -705,7 +705,7 @@ sign_rrset(ksr_ctx_t *ksr, isc_stdtime_t inception, isc_stdtime_t expiration,
if (act > inception) {
continue;
}
if (inact != 0 && inception >= inact) {
if (inact != 0 && inception > inact) {
continue;
}