]> git.ipfire.org Git - thirdparty/bind9.git/commit
Fix off by one error in dnssec-ksr sign
authorMatthijs Mekking <matthijs@isc.org>
Thu, 2 Apr 2026 08:01:27 +0000 (10:01 +0200)
committerMatthijs Mekking <matthijs@isc.org>
Tue, 7 Apr 2026 08:32:58 +0000 (08:32 +0000)
commitad45cdd3830c405ac7ed20bf2f628c7fc31940ac
tree920fae1d957b55d3787f95287b0f540a0b48bcd9
parent6d89bfdf03a08f36e4fc2aa4c25a20a94da74cd2
Fix off by one error in dnssec-ksr sign

If the inception time of the signature is exactly equal to the
inactive time of the key, still include the signature. Otherwise there
may be corner cases where signatures are omitted erroneously.

(cherry picked from commit bc6dad585d897234cae63f3ebe2d8b962329ef35)
bin/dnssec/dnssec-ksr.c