]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
accept 0 for dnskey-sig-validity (indicates off)
authorMark Andrews <marka@isc.org>
Thu, 24 Oct 2019 02:21:43 +0000 (13:21 +1100)
committerMark Andrews <marka@isc.org>
Thu, 24 Oct 2019 12:15:09 +0000 (23:15 +1100)
lib/bind9/check.c

index 9fc6736a7ac85624efa0cd943596bd08d0ce3a4c..1426c4186726cf51ab7336f48638f45e85b2f9fd 100644 (file)
@@ -1000,9 +1000,9 @@ check_options(const cfg_obj_t *options, isc_log_t *logctx, isc_mem_t *mctx,
                uint32_t keyvalidity;
 
                keyvalidity = cfg_obj_asuint32(obj);
-               if (keyvalidity > 3660 || keyvalidity == 0) { /* 10 years */
+               if (keyvalidity > 3660) {                /* 10 years */
                        cfg_obj_log(obj, logctx, ISC_LOG_ERROR,
-                                   "%s '%u' is out of range (1..3660)",
+                                   "%s '%u' is out of range (0..3660)",
                                    "dnskey-sig-validity",
                                    keyvalidity);
                        result = ISC_R_RANGE;