accept 0 for dnskey-sig-validity (indicates off)

(cherry picked from commit 20647657f9f64a51108c9f53240535d399bfcd4b)

diff --git a/lib/bind9/check.c b/lib/bind9/check.c
index 50cde3f9303b60e5871f103b958dd3d393933580..b225d123f9925d4a52e29706e7027d7643f58121 100644 (file)
--- a/lib/bind9/check.c
+++ b/lib/bind9/check.c
@@ -1011,9 +1011,9 @@ check_options(const cfg_obj_t *options, isc_log_t *logctx, isc_mem_t *mctx,
                uint32_t keyvalidity;
 
                keyvalidity = cfg_obj_asuint32(obj);
-               if (keyvalidity > 3660 || keyvalidity == 0) { /* 10 years */
+               if (keyvalidity > 3660) {                /* 10 years */
                        cfg_obj_log(obj, logctx, ISC_LOG_ERROR,
-                                   "%s '%u' is out of range (1..3660)",
+                                   "%s '%u' is out of range (0..3660)",
                                    "dnskey-sig-validity",
                                    keyvalidity);
                        result = ISC_R_RANGE;