Skip to content

Recompute the resign timer when policy changes.#646

Open
Philip-NLnetLabs wants to merge 1 commit into
mainfrom
recompute-resign-timer-on-policy-change
Open

Recompute the resign timer when policy changes.#646
Philip-NLnetLabs wants to merge 1 commit into
mainfrom
recompute-resign-timer-on-policy-change

Conversation

@Philip-NLnetLabs
Copy link
Copy Markdown
Member

Recompute the resign timer when policy changes.


  • If you are changing Rust code or integration tests (Cargo.*, crates/, etc/, integration-tests/, src/):
    • Did you run the integration tests with act through the act-wrapper (as described in TESTING.md)?

Comment thread src/units/zone_signer.rs
// Just recompute the resign timer. In the future we may want to
// react to changes in policy, for example, whether NSEC is used
// or NSEC3.
let _ = self.next_resign_time_tx.send(Some(Instant::now()));
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

When I read "recompute" I expected something more than "now". Is that correct?

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would some policy changes require notifying dnst keyset of changes? If so, would that result in dnst keyset deciding re-signing needs to happen now, and thus is an alternative way to do this be to nudge the Cascade key manager to invoke dnst keyset to find out if re-signing is needed?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants