From: Matthijs Mekking <matthijs@isc.org>
Date: Thu, 5 Mar 2026 10:49:45 +0000 (+0000)
Subject: fix: usr: Fix setting retire in dns_keymgr_key_init
X-Git-Tag: v9.21.20~17
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a6701c37b98414175690cc4a81cdaa8c50e9b3ff;p=thirdparty%2Fbind9.git

fix: usr: Fix setting retire in dns_keymgr_key_init

A wrong-variable bug in `dns_keymgr_key_init()` causes the DNSSEC key inactive
time to never be read. This means the key state is retracting zone signatures
where it should have, delaying the key rollover.

ISC would like to thank Naresh Kandula Parmar (Nottiboy) for reporting this.

Closes #5774

Merge branch '5774-fix-setting-retire' into 'main'

See merge request isc-projects/bind9!11624
---

a6701c37b98414175690cc4a81cdaa8c50e9b3ff