Skip to content
This repository has been archived by the owner on Jun 7, 2024. It is now read-only.

test that expired signatures are rejected #61

Open
japaric opened this issue May 15, 2024 · 0 comments
Open

test that expired signatures are rejected #61

japaric opened this issue May 15, 2024 · 0 comments
Labels
dnssec Conformance to DNSSEC RFCs

Comments

@japaric
Copy link
Collaborator

japaric commented May 15, 2024

all these cases

  • RRSIG.inception > RRSIG.expiration
  • RRSIG.inception > current_time
  • current_time > RRSIG.expiration

this is probably easiest to test with a +adflag SOA . query as that does not involve chain of trust validation. see can_validate_without_delegation
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
dnssec Conformance to DNSSEC RFCs
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@japaric