[Dnsmasq-discuss] Clarify/Improve DNSSEC related SIGHUP handling

Kevin Darbyshire-Bryant kevin at darbyshire-bryant.me.uk
Fri May 27 13:37:12 BST 2016


Hi Simon,

Please could you consider the attached patch.  It solves a problem that 
using dnssec-timestamp also effectively enabled dnssec-no-timecheck. 
The result of which is that an unfortunately timed SIGHUP could 
accidentally enable dnssec timestamp checking.  In combination with 
dnssec-check-unsigned that could prove 'challenging' :-)

The patch matches the behaviour is as documented in the manpage.

kind regards,

Kevin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Improve-dnssec-SIGHUP-behaviour.patch
Type: text/x-patch
Size: 2636 bytes
Desc: not available
URL: <http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/attachments/20160527/0beaa254/attachment.bin>


More information about the Dnsmasq-discuss mailing list