[Opendnssec-develop] RRSIG's and 2038

Patrik Wallström patrik.wallstrom at iis.se
Mon Sep 20 09:07:40 UTC 2010

On Sep 20, 2010, at 10:48 AM, Marco Davids (SIDN) wrote:
> List,
> Inspired by...
> https://lists.isc.org/pipermail/bind-users/2010-September/081076.html
> I tried some dates in the future with DNSSEC and I was able to sign a
> zone (forfunsec.org) with an expiration time of 20771231000000. Dates
> after that are not possible, which seems consistent with RFC1982.
> For what is is worth; DNScheck seems unable to handle this date. It
> generates an error: 'DNSSEC signature expired'.
> I haven't tried to lower the date up to a value that DNScheck accepts,
> but I suspect that it will be somewhere around the year 2038?

I have notified the DNSCheck people. ;)

Patrik Wallström
Project Manager, R&D
.SE (Stiftelsen för Internetinfrastruktur)
E-mail: patrik.wallstrom at iis.se
Web: http://www.iis.se/

More information about the Opendnssec-develop mailing list