To: | bind9-public@isc.org |
From: | michal@isc.org |
Subject: | dnssec-settime incorrectly calculates dates for a successor key |
Date: | Fri, 18 Aug 2017 11:22:20 +0000 |
Commit c8803902d6e (included in BIND 9.9.3 and all further releases)
broke calculation of publication and activation dates for a successor
key (-S). Depending on dates set for the predecessor key, this may
either cause a bogus fatal error to be reported or invalid dates to be
set for the successor key.