Control: forwarded -1 https://gitlab.isc.org/isc-projects/bind9/issues/625
--
Ondřej Surý
ond...@sury.org
> On 24 Oct 2018, at 21:59, Peter Palfrader <wea...@debian.org> wrote:
>
> To reproduce:
>
>
> mkdir example.com
> cd example.com
> faketime -f '-1y' /usr/sbin/dnssec-keygen -f KSK -K . -a RSASHA256 -3 -b
> 2048 example.com
>
> key=$(faketime -f '-1y' /usr/sbin/dnssec-keygen -K . -a RSASHA256 -3 -b 1024
> -I +120d -D +150d example.com)
> first=$key
>
> lt=120
> for i in `seq 1 5`; do
> lt=$((lt + 120))
> key=$(faketime -f '-1y' /usr/sbin/dnssec-keygen -K . -S "$key.key" -I
> +${lt}d -D +$((lt+30))d example.com)
> done
>
> /usr/sbin/dnssec-coverage -K . -l 200d -c /usr/sbin/named-compilezone
> example.com
> rm $first.key $first.private
> /usr/sbin/dnssec-coverage -K . -l 200d -c /usr/sbin/named-compilezone
> example.com
>
>
>
> Cheers,
> --
> | .''`. ** Debian **
> Peter Palfrader | : :' : The universal
> https://www.palfrader.org/ | `. `' Operating System
> | `- https://www.debian.org/
>
