Strange tiny time limit RRSIG

Chris Thompson cet1 at cam.ac.uk
Fri Aug 14 19:42:11 UTC 2009


On Aug 14 2009, Evan Hunt wrote:

>Your -j flag says, use a 30 day jitter window for the expiry times.  So now
>it's 30 days in the future, plus or minus 15 days.

Are you sure about this? The OP is talking about 9.6.1 and as I read the
source of isc_random_jitter() in lib/isc/random.c, jitter only makes the
interval less, by up to the -j amount, never more.

-- 
Chris Thompson
Email: cet1 at cam.ac.uk



More information about the bind-users mailing list