From: Shaft Inc <141560544+ShaftInc@users.noreply.github.com>
Date: Sun, 6 Aug 2023 17:33:32 +0000 (+0200)
Subject: DNSSEC rrsig_expiration calculation (#977)
X-Git-Tag: v2.5.0rc1~55
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=4259dd4946661ab406a97fcd7bf7fe86170c273a;p=thirdparty%2Fdnspython.git

DNSSEC rrsig_expiration calculation (#977)

The 'rrsig_expiration' calculation did not take into account inception date when using 'lifetime' in the '_sign()' function
---

diff --git a/dns/dnssec.py b/dns/dnssec.py
index d63fc5a9..2949f619 100644
--- a/dns/dnssec.py
+++ b/dns/dnssec.py
@@ -549,7 +549,7 @@ def _sign(
     if expiration is not None:
         rrsig_expiration = to_timestamp(expiration)
     elif lifetime is not None:
-        rrsig_expiration = int(time.time()) + lifetime
+        rrsig_expiration = rrsig_inception + lifetime
     else:
         raise ValueError("expiration or lifetime must be specified")