[Opendnssec-develop] RRSIG's and 2038

[Patrik Wallström]

On Sep 20, 2010, at 10:48 AM, Marco Davids (SIDN) wrote:
> 
> List,
> 
> Inspired by...
> 
> https://lists.isc.org/pipermail/bind-users/2010-September/081076.html
> 
> I tried some dates in the future with DNSSEC and I was able to sign a
> zone (forfunsec.org) with an expiration time of 20771231000000. Dates
> after that are not possible, which seems consistent with RFC1982.
> 
> For what is is worth; DNScheck seems unable to handle this date. It
> generates an error: 'DNSSEC signature expired'.
> 
> I haven't tried to lower the date up to a value that DNScheck accepts,
> but I suspect that it will be somewhere around the year 2038?

I have notified the DNSCheck people. ;)

-- 
Patrik Wallström
Project Manager, R&D
.SE (Stiftelsen för Internetinfrastruktur)
E-mail: patrik.wallstrom at iis.se
Web: http://www.iis.se/