picnoir/Systemd
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

resolved: make expiration error recognizable

Browse source
This commit is contained in:
Lennart Poettering 2015-12-03 17:22:17 +01:00
parent c9ad0edbab
commit 2a44bec4f6
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/resolve/resolved-dns-dnssec.c
View file

@ -228,7 +228,7 @@ static int dnssec_rrsig_expired(DnsResourceRecord *rrsig, usec_t realtime) {
inception = rrsig->rrsig.inception * USEC_PER_SEC; inception = rrsig->rrsig.inception * USEC_PER_SEC;
if (inception > expiration) if (inception > expiration)
return -EINVAL; return -EKEYREJECTED;
/* Permit a certain amount of clock skew of 10% of the valid time range */ /* Permit a certain amount of clock skew of 10% of the valid time range */
skew = (expiration - inception) / 10; skew = (expiration - inception) / 10;