[Opendnssec-develop] Policy configuration checker

Rickard Bondesson rickard.bondesson at iis.se
Tue Aug 11 13:33:15 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

> But why waste resign resources if you are not going to output 
> it anyway?
> In this example, you can save 23 times resigning that will be 
> unnoticed.
> 
> Matthijs

But the signer should not do anything if the old signed file has the same soa as the unsigned file (and you have <SOA><Serial>keep</Serial></SOA>). Thus not wasting so much cpu.

if (soa_serial_type == keep && signed_zone_soa == unsigned_zone_soa) {
  break_out_and_sleep_for_5_min();
}
do_resign();

// Rickard
-----BEGIN PGP SIGNATURE-----
Version: 9.8.3 (Build 4028)
Charset: utf-8

wsBVAwUBSoFzGuCjgaNTdVjaAQhRsAf+J2kZuAvfReoYjz2TpVq5t+TTFGpQCZmh
I67WkvWYvjK293i3uX6TXY/VuuJKTKeH9fjthT8LItPMw3h4aUOoNU9NDj7vLitC
IaNueOq+3GqIAIF2Uvs9JpL0QlRVo5hNcwQwTWNleLbFhy+gvVvyGr1A3/1THDnm
+a5dn9Cg2mjJbVKYIuEK0cEuFKA5qpTVnErdpdQwc3LQ7rBIkh8vjBQgKZe+PuGy
7UWA6zkVOdpgCJWLoZIDT0rccddje3ueZycOA+U9+kMxlaUePY5ESYQzo4wQ1qni
1so+V27AuL1TUCnMwSidbtBCJXQ7RhMIVyUVPiLmBdntmv8DCMwfbA==
=Kl6q
-----END PGP SIGNATURE-----



More information about the Opendnssec-develop mailing list