Matthijs Mekking 3cfbe31176 Error if key lifetime is too short ... The key lifetime should not be shorter than the time it costs to introduce the successor key, otherwise keys will be created faster than they are removed, resulting in a large key set. The time it takes to replace a key is determined by the publication interval (Ipub) of the successor key and the retire interval of the predecessor key (Iret). For the ZSK, Ipub is the sum of the DNSKEY TTL and zone propagation delay (and publish safety). Iret is the sum of Dsgn, the maximum zone TTL and zone propagation delay (and retire safety). The sign delay is the signature validity period minus the refresh interval: The time to ensure that all existing RRsets have been re-signed with the new key. The ZSK lifetime should be larger than both values. For the KSK, Ipub is the sum of the DNSKEY TTL and zone propagation delay (and publish safety). Iret is the sum of the DS TTL and parent zone propagation delay (and retire safety). The KSK lifetime should be larger than both values. (cherry picked from commit 8134d46cdb)		2022-05-31 17:16:53 +02:00
..
bind9	prevent a possible buffer overflow in configuration check	2022-05-13 20:29:36 -07:00
dns	Move all the unit tests to /tests/<libname>/	2022-05-31 12:06:00 +02:00
irs	Move all the unit tests to /tests/<libname>/	2022-05-31 12:06:00 +02:00
isc	Move all the unit tests to /tests/<libname>/	2022-05-31 12:06:00 +02:00
isccc	Remove use of the inline keyword used as suggestion to compiler	2022-03-25 08:42:18 +01:00
isccfg	Error if key lifetime is too short	2022-05-31 17:16:53 +02:00
ns	Move all the unit tests to /tests/<libname>/	2022-05-31 12:06:00 +02:00
.gitignore	The isc/platform.h header has been completely removed	2021-07-06 05:33:48 +00:00
Makefile.am	move samples/resolve.c to bin/tests/system	2021-04-16 14:29:43 +02:00