a621e035d4
Be stricter in durations that are accepted. Basically we accept ISO 8601
formats, but fail to detect garbage after the integers in such strings.
For example, 'P7.5D' will be treated as 7 days. Pass 'endptr' to
'strtoll' and check if the endptr is at the correct suffix.
(cherry picked from commit e39de45adc)
26 lines
645 B
Plaintext
26 lines
645 B
Plaintext
/*
|
|
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
*
|
|
* SPDX-License-Identifier: MPL-2.0
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
*
|
|
* See the COPYRIGHT file distributed with this work for additional
|
|
* information regarding copyright ownership.
|
|
*/
|
|
|
|
dnssec-policy "invalid-sigrefresh" {
|
|
keys {
|
|
csk lifetime unlimited algorithm 13;
|
|
};
|
|
signatures-refresh P7.5D;
|
|
};
|
|
|
|
zone "example.net" {
|
|
type primary;
|
|
file "example.db";
|
|
dnssec-policy "invalid-sigrefresh";
|
|
};
|