diff options
| author | Lennart Poettering <lennart@poettering.net> | 2015-12-03 17:22:17 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2015-12-03 21:17:49 +0100 |
| commit | 2a44bec4f62833222a85ad8c90054468dfa75013 (patch) | |
| tree | 06e08b937672d8ff333e427971a903f616975a5c | |
| parent | c9ad0edbab44123ad14767232c2d5a2c5641b459 (diff) | |
resolved: make expiration error recognizable
| -rw-r--r-- | src/resolve/resolved-dns-dnssec.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c index a32e938045..89833441fd 100644 --- a/src/resolve/resolved-dns-dnssec.c +++ b/src/resolve/resolved-dns-dnssec.c @@ -228,7 +228,7 @@ static int dnssec_rrsig_expired(DnsResourceRecord *rrsig, usec_t realtime) { inception = rrsig->rrsig.inception * USEC_PER_SEC; if (inception > expiration) - return -EINVAL; + return -EKEYREJECTED; /* Permit a certain amount of clock skew of 10% of the valid time range */ skew = (expiration - inception) / 10; |