Skip to content

dnssec-ksr: Only sign with KSK if time is between 'Active' and 'Inactive'

The tool currently always signs with each KSK available. It should only select KSKs that have the start time of the bundle is between Active and Inactive. These values should be considered when the next bundle starts and ends.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information