[Opendnssec-develop] RRSIG's and 2038
patrik.wallstrom at iis.se
Mon Sep 20 09:07:40 UTC 2010
On Sep 20, 2010, at 10:48 AM, Marco Davids (SIDN) wrote:
> Inspired by...
> I tried some dates in the future with DNSSEC and I was able to sign a
> zone (forfunsec.org) with an expiration time of 20771231000000. Dates
> after that are not possible, which seems consistent with RFC1982.
> For what is is worth; DNScheck seems unable to handle this date. It
> generates an error: 'DNSSEC signature expired'.
> I haven't tried to lower the date up to a value that DNScheck accepts,
> but I suspect that it will be somewhere around the year 2038?
I have notified the DNSCheck people. ;)
Project Manager, R&D
.SE (Stiftelsen för Internetinfrastruktur)
E-mail: patrik.wallstrom at iis.se
More information about the Opendnssec-develop