<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=gb2312" http-equiv=Content-Type>
<STYLE>
BLOCKQUOTE {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px; MARGIN-LEFT: 2em
}
OL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
UL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
BODY {
LINE-HEIGHT: 1.5; FONT-FAMILY: ËÎÌå; COLOR: #000000; FONT-SIZE: 10.5pt
}
</STYLE>
<META name=GENERATOR content="MSHTML 8.00.6001.18702"></HEAD>
<BODY style="MARGIN: 10px">
<DIV>Hi all,</DIV>
<DIV> </DIV>
<DIV>I have added a new zone and signed it with ods-signer, but I found that the
signature validity and expiration time in the signed zone file was not the
time when I signed,there are hours delay.</DIV>
<DIV>The time I ran ods-signer was 20/8/2012 17:08 P.M.,but the signature period
actually began from 20/8/2012 08:08 A.M., there are 9 hours delay. This will
surely affect the validity of signature.</DIV>
<DIV> </DIV>
<DIV>
<DIV>[dns@CST-BJ-104:var/opendnssec/signed]$head example </DIV>
<DIV>example. 300 IN SOA ns1.example. mail.example. 1345453691 10800 3600 60480 300</DIV>
<DIV>example. 300 IN RRSIG SOA 8 1 300 <SPAN
style="FONT-WEIGHT: bold">20120830090809 </SPAN><SPAN
style="FONT-WEIGHT: bold">20120820080811 </SPAN>15901 example. EI0qhqmK2yZptcF38DkQHVqQqw8Pk7DX7J56iYRF846KzQRg9meVjEeYNNXS4MtEh4F34tvjLdw+NqCSDPPHB7CQQlNUTgTxHbBjEWXt9AbhqhWhfCkTHCRAPEuy6uV8T7ZVTyq5qqyOkpAAXzw77BJ94d3QrzrShHoc405eWrU=</DIV>
<DIV>e</DIV></DIV>
<DIV> </DIV>
<DIV>Best regards,</DIV>
<DIV>Stuart</DIV></BODY></HTML>