- The key-cache bad key ttl is now 60 seconds.

git-svn-id: file:///svn/unbound/trunk@2685 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/Changelog b/doc/Changelog
index ca4478665ff4c53bdb1043eb568674991f7566ed..79e2cdc7dc915092dbafa82485aebae3e9015152 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,6 +1,9 @@
+15 June 2012: Wouter
+       - implement log-time-ascii on windows.
+       - The key-cache bad key ttl is now 60 seconds.
+
 11 June 2012: Wouter
        - bug #452: fix crash on assert in mesh_state_attachment.
-       - implement log-time-ascii on windows.
 
 30 May 2012: Wouter
        - silence warning from swig-generated code (md set but not used in

diff --git a/validator/validator.h b/validator/validator.h
index 18e905efcd2b6afb8f35c08311b7380735377176..1a29c161b9f25e251eb0b1a2c42cef9075d81ce7 100644 (file)
--- a/validator/validator.h
+++ b/validator/validator.h
@@ -56,13 +56,13 @@ struct config_strlist;
  * will be primed no more often than this interval.  Used when harden-
  * dnssec-stripped is off and the trust anchor fails.
  */
-#define NULL_KEY_TTL   900 /* seconds */
+#define NULL_KEY_TTL   60 /* seconds */
 
 /**
  * TTL for bogus key entries.  When a DS or DNSKEY fails in the chain of
  * trust the entire zone for that name is blacked out for this TTL.
  */
-#define BOGUS_KEY_TTL  900 /* seconds */
+#define BOGUS_KEY_TTL  60 /* seconds */
 
 /** max number of query restarts, number of IPs to probe */
 #define VAL_MAX_RESTART_COUNT 5