Commit 741bc11b authored by Witold Krecicki's avatar Witold Krecicki

dnssec: use less-or-equal when looking at SyncPublish time

If we created a key, mark its SyncPublish time as 'now' and started
bind the key might not be published if the SyncPublish time is in
the same second as the time the zone is loaded. This is mostly
for dnssec system test, as this kind of scenario is very unlikely
in a real world environment.
parent 4a26f7d1
Pipeline #31438 passed with stages
in 20 minutes and 21 seconds
......@@ -673,7 +673,7 @@ syncpublish(dst_key_t *key, isc_stdtime_t now) {
/* If no kasp state, check timings. */
publish = false;
result = dst_key_gettime(key, DST_TIME_SYNCPUBLISH, &when);
if (result == ISC_R_SUCCESS && when < now) {
if (result == ISC_R_SUCCESS && when <= now) {
publish = true;
}
result = dst_key_gettime(key, DST_TIME_SYNCDELETE, &when);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment