[Opendnssec-user] Jitter/validity corner case

Alex Dalitz AlexD at nominet.org.uk
Thu Jul 15 15:26:22 UTC 2010


Hi - 

> The policy indicates Jitter of 2 days, a default Validity of 12 hours
> and denial validity of 24 hours. ods-kaspcheck complains with a warning,
> but it should be treated as an error.

I've added a check for Jitter being less than both Default and Denial Validity. The check is in both trunk and the 1.1 branch.

Thanks!


Alex.


More information about the Opendnssec-user mailing list