From: Mark Andrews <marka@isc.org>
Date: Thu, 24 Oct 2019 02:21:43 +0000 (+1100)
Subject: accept 0 for dnskey-sig-validity (indicates off)
X-Git-Tag: v9.15.6~52^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=20647657f9f64a51108c9f53240535d399bfcd4b;p=thirdparty%2Fbind9.git

accept 0 for dnskey-sig-validity (indicates off)
---

diff --git a/lib/bind9/check.c b/lib/bind9/check.c
index 9fc6736a7ac..1426c418672 100644
--- a/lib/bind9/check.c
+++ b/lib/bind9/check.c
@@ -1000,9 +1000,9 @@ check_options(const cfg_obj_t *options, isc_log_t *logctx, isc_mem_t *mctx,
 		uint32_t keyvalidity;
 
 		keyvalidity = cfg_obj_asuint32(obj);
-		if (keyvalidity > 3660 || keyvalidity == 0) { /* 10 years */
+		if (keyvalidity > 3660) {		 /* 10 years */
 			cfg_obj_log(obj, logctx, ISC_LOG_ERROR,
-				    "%s '%u' is out of range (1..3660)",
+				    "%s '%u' is out of range (0..3660)",
 				    "dnskey-sig-validity",
 				    keyvalidity);
 			result = ISC_R_RANGE;