CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2019/02/17 09:15:31
Modified files:
sbin/unwind : frontend.c resolver.c unwind.h
Log message:
Since we do a naive string comparison to see if the trust anchor
changed we need to fix the TTL to the value we would get from the root
for the ksk DNSKEY (currently 2 days). Otherwise we would interpret a
lowerd TTL from a cache as changed trust anchor.
Use the same define everywhere.
(Considering the glacial speed with which the root ksk rotates this should
be fine for the forseable future.)
