[Opendnssec-develop] Policy configuration checker
Rickard Bondesson
rickard.bondesson at iis.se
Tue Aug 11 13:33:15 UTC 2009
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
> But why waste resign resources if you are not going to output
> it anyway?
> In this example, you can save 23 times resigning that will be
> unnoticed.
>
> Matthijs
But the signer should not do anything if the old signed file has the same soa as the unsigned file (and you have <SOA><Serial>keep</Serial></SOA>). Thus not wasting so much cpu.
if (soa_serial_type == keep && signed_zone_soa == unsigned_zone_soa) {
break_out_and_sleep_for_5_min();
}
do_resign();
// Rickard
-----BEGIN PGP SIGNATURE-----
Version: 9.8.3 (Build 4028)
Charset: utf-8
wsBVAwUBSoFzGuCjgaNTdVjaAQhRsAf+J2kZuAvfReoYjz2TpVq5t+TTFGpQCZmh
I67WkvWYvjK293i3uX6TXY/VuuJKTKeH9fjthT8LItPMw3h4aUOoNU9NDj7vLitC
IaNueOq+3GqIAIF2Uvs9JpL0QlRVo5hNcwQwTWNleLbFhy+gvVvyGr1A3/1THDnm
+a5dn9Cg2mjJbVKYIuEK0cEuFKA5qpTVnErdpdQwc3LQ7rBIkh8vjBQgKZe+PuGy
7UWA6zkVOdpgCJWLoZIDT0rccddje3ueZycOA+U9+kMxlaUePY5ESYQzo4wQ1qni
1so+V27AuL1TUCnMwSidbtBCJXQ7RhMIVyUVPiLmBdntmv8DCMwfbA==
=Kl6q
-----END PGP SIGNATURE-----
More information about the Opendnssec-develop
mailing list