[master] fix keymgr with low prepublication interval

4417.	[bug]		dnssec-keymgr could fail to create successor keys
			if the prepublication interval was set to a value
			smaller than the default. [RT #42820]

Patch submitted by Nis Wechselberg (enbewe@enbewe.de).
This commit is contained in:
Evan Hunt
2016-07-20 15:12:56 -07:00
parent a870e4e773
commit f7b5487474
8 changed files with 55 additions and 3 deletions

View File

@@ -30,8 +30,11 @@ for dir in [0-9][0-9]-*; do
kargs= cargs= kmatch= cmatch= kret= cret=0 warn= error= ok=
. $dir/expect
# use policy.conf if available
policy=""
[ -e "$dir/policy.conf" ] && policy="-c $dir/policy.conf"
# run keymgr to update keys
$KEYMGR -K $dir -g $KEYGEN -r $RANDFILE -s $SETTIME $kargs > keymgr.$n 2>&1
$KEYMGR $policy -K $dir -g $KEYGEN -r $RANDFILE -s $SETTIME $kargs > keymgr.$n 2>&1
# check that return code matches expectations
found=$?
if [ $found -ne $kret ]; then