[Dnsmasq-discuss] Clarify/Improve DNSSEC related SIGHUP handling

[Kevin Darbyshire-Bryant]

Hi Simon,

Please could you consider the attached patch. It solves a problem that
using dnssec-timestamp also effectively enabled dnssec-no-timecheck.
The result of which is that an unfortunately timed SIGHUP could
accidentally enable dnssec timestamp checking. In combination with
dnssec-check-unsigned that could prove 'challenging' :-)

The patch matches the behaviour is as documented in the manpage.

kind regards,

Kevin

[Kevin Darbyshire-Bryant]

Post by Kevin Darbyshire-Bryant
Hi Simon,
Please could you consider the attached patch. It solves a problem that
using dnssec-timestamp also effectively enabled dnssec-no-timecheck.

<snip>

Any thoughts?

Kevin

[Kevin Darbyshire-Bryant]

Hi Simon,

Please could you consider the attached patch. It solves a problem that
using dnssec-timestamp also effectively enabled dnssec-no-timecheck.
The result of which is that an unfortunately timed SIGHUP could
accidentally enable dnssec timestamp checking. In combination with
dnssec-check-unsigned that could prove 'challenging' :-)

The patch matches the behaviour as is documented in the manpage.

kind regards,

Kevin

[Simon Kelley]

Ah yes, I see the problem. Patch applied. Sorry it took so long :-(

Cheers,

Simon.

Post by Kevin Darbyshire-Bryant
Hi Simon,
Please could you consider the attached patch. It solves a problem that
using dnssec-timestamp also effectively enabled dnssec-no-timecheck.
The result of which is that an unfortunately timed SIGHUP could
accidentally enable dnssec timestamp checking. In combination with
dnssec-check-unsigned that could prove 'challenging' :-)
The patch matches the behaviour as is documented in the manpage.
kind regards,
Kevin
_______________________________________________
Dnsmasq-discuss mailing list
http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss

[Kevin Darbyshire-Bryant]

Post by Simon Kelley
Ah yes, I see the problem. Patch applied. Sorry it took so long :-(
Cheers,
Simon.

No problem. Glad to have helped solve it :-)

Cheers,

Kevin