mirror of
https://github.com/NLnetLabs/unbound.git
synced 2025-12-20 23:00:56 -05:00
Various documentation fixes.
git-svn-id: file:///svn/unbound/trunk@2038 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
parent
788cd9d6ee
commit
e3d6aaf697
4 changed files with 13 additions and 11 deletions
|
|
@ -6,6 +6,7 @@ To make and run the tests. The results are summarized at the end.
|
||||||
|
|
||||||
You need to have the following programs installed and in your PATH.
|
You need to have the following programs installed and in your PATH.
|
||||||
* dig - from the bind-tools package. Used to send DNS queries.
|
* dig - from the bind-tools package. Used to send DNS queries.
|
||||||
|
* wdiff - used for word-by-word comparisons.
|
||||||
* splint (optional) - for lint test
|
* splint (optional) - for lint test
|
||||||
* doxygen (optional) - for doc completeness test
|
* doxygen (optional) - for doc completeness test
|
||||||
* ldns-testns (optional) - from ldns examples. Used as DNS auth server.
|
* ldns-testns (optional) - from ldns examples. Used as DNS auth server.
|
||||||
|
|
|
||||||
|
|
@ -62,5 +62,4 @@ local_data <resource record string>
|
||||||
local_data_add www.example.com. IN A 192.0.2.2
|
local_data_add www.example.com. IN A 192.0.2.2
|
||||||
if no local_zone exists for it; a transparent zone with the same
|
if no local_zone exists for it; a transparent zone with the same
|
||||||
name as the data is created.
|
name as the data is created.
|
||||||
|
Other commands in the unbound-control manual page.
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -344,7 +344,7 @@ server:
|
||||||
# val-bogus-ttl: 60
|
# val-bogus-ttl: 60
|
||||||
|
|
||||||
# The signature inception and expiration dates are allowed to be off
|
# The signature inception and expiration dates are allowed to be off
|
||||||
# by 10% of the lifetime of the signature from our local clock.
|
# by 10% of the signature lifetime (expir-incep) from our local clock.
|
||||||
# This leeway is capped with a minimum and a maximum. In seconds.
|
# This leeway is capped with a minimum and a maximum. In seconds.
|
||||||
# val-sig-skew-min: 3600
|
# val-sig-skew-min: 3600
|
||||||
# val-sig-skew-max: 86400
|
# val-sig-skew-max: 86400
|
||||||
|
|
|
||||||
|
|
@ -581,17 +581,19 @@ you are debugging signature inception and expiration.
|
||||||
.TP
|
.TP
|
||||||
.B val\-sig\-skew\-min: \fI<seconds>
|
.B val\-sig\-skew\-min: \fI<seconds>
|
||||||
Minimum number of seconds of clock skew to apply to validated signatures.
|
Minimum number of seconds of clock skew to apply to validated signatures.
|
||||||
A value of 10% of the signature lifetime is used, capped by this setting.
|
A value of 10% of the signature lifetime (expiration \- inception) is
|
||||||
Default is 3600 (1 hour) which allows for daylight savings differences.
|
used, capped by this setting. Default is 3600 (1 hour) which allows for
|
||||||
Lower this value for more strict checking of short lived signatures.
|
daylight savings differences. Lower this value for more strict checking
|
||||||
|
of short lived signatures.
|
||||||
.TP
|
.TP
|
||||||
.B val\-sig\-skew\-max: \fI<seconds>
|
.B val\-sig\-skew\-max: \fI<seconds>
|
||||||
Maximum number of seconds of clock skew to apply to validated signatures.
|
Maximum number of seconds of clock skew to apply to validated signatures.
|
||||||
A value of 10% of the signature lifetime is used, capped by this setting.
|
A value of 10% of the signature lifetime (expiration \- inception)
|
||||||
Default is 86400 (24 hours) which allows for timezone setting problems in
|
is used, capped by this setting. Default is 86400 (24 hours) which
|
||||||
stable domains. Setting both min and max very low disables the clock skew
|
allows for timezone setting problems in stable domains. Setting both
|
||||||
allowances. Setting both min and max very high makes the validator check
|
min and max very low disables the clock skew allowances. Setting both
|
||||||
the signature timestamps less strictly.
|
min and max very high makes the validator check the signature timestamps
|
||||||
|
less strictly.
|
||||||
.TP
|
.TP
|
||||||
.B val\-bogus\-ttl: \fI<number>
|
.B val\-bogus\-ttl: \fI<number>
|
||||||
The time to live for bogus data. This is data that has failed validation;
|
The time to live for bogus data. This is data that has failed validation;
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue