Skip to content

dnssec-ksr: Only create CDS/CDNSKEY if time is between 'PublishCDS' and 'DeleteCDS'

The tool currently always creates a signed CDS and CDNSKEY RRset for each bundle. It should only do so if the start time of the bundle is between PublishCDS and DeleteCDS. These values should be considered when the next bundle starts and ends.

Edited by Matthijs Mekking
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information