Matthijs Mekking 63edc4435f Fix wrong usage of safety intervals in keymgr ... There are a couple of cases where the safety intervals are added inappropriately: 1. When setting the PublishCDS/SyncPublish timing metadata, we don't need to add the publish-safety value if we are calculating the time when the zone is completely signed for the first time. This value is for when the DNSKEY has been published and we add a safety interval before considering the DNSKEY omnipresent. 2. The retire-safety value should only be added to ZSK rollovers if there is an actual rollover happening, similar to adding the sign delay. 3. The retire-safety value should only be added to KSK rollovers if there is an actual rollover happening. We consider the new DS omnipresent a bit later, so that we are forced to keep the old DS a bit longer.		2025-03-20 10:12:16 +00:00
..
check	Replace isc_mem_destroy() with isc_mem_detach()	2025-03-05 11:17:17 +01:00
confgen	Replace isc_mem_destroy() with isc_mem_detach()	2025-03-05 11:17:17 +01:00
delv	unify fips handling to isc_crypto and make the toggle one way	2025-02-27 17:37:43 +03:00
dig	use new dns_rdatatype classification functions	2025-03-15 00:27:54 +00:00
dnssec	Replace isc_mem_destroy() with isc_mem_detach()	2025-03-05 11:17:17 +01:00
named	Implement -T cookiealwaysvalid	2025-03-17 10:42:47 +00:00
nsupdate	simplify dns_name_fromtext() interface	2025-02-25 12:53:25 -08:00
plugins	Remove redundant parentheses from the return statement	2024-11-19 12:27:22 +01:00
rndc	Move the library init and shutdown to executables	2025-02-22 16:19:00 +01:00
tests	Fix wrong usage of safety intervals in keymgr	2025-03-20 10:12:16 +00:00
tools	Replace isc_mem_destroy() with isc_mem_detach()	2025-03-05 11:17:17 +01:00
Makefile.am	Remove native PKCS#11 support	2021-09-09 15:35:39 +02:00