Content-Type: text/plain; charset="utf-8"
Message-ID: <rt-4.4.1-80685-1503055340-107.0-0-0@isc.org>
To: bind9-public@isc.org
Content-Transfer-Encoding: binary
X-RT-Interface: Web
MIME-Version: 1.0
From: michal@isc.org
X-Mailer: MIME-tools 5.508 (Entity 5.508)
Subject: dnssec-settime incorrectly calculates dates for a successor key
Content-Disposition: inline
Date: Fri, 18 Aug 2017 11:22:20 +0000
X-RT-Original-Encoding: utf-8
Content-Length: 305

Commit c8803902d6e (included in BIND 9.9.3 and all further releases)
broke calculation of publication and activation dates for a successor
key (-S).  Depending on dates set for the predecessor key, this may
either cause a bogus fatal error to be reported or invalid dates to be
set for the successor key.