Home | History | Annotate | Download | only in dns

Lines Matching defs:retire

122  * Set the remove time on key given its retire time.
127 	isc_stdtime_t retire = 0, remove = 0, ksk_remove = 0, zsk_remove = 0;
134 	ret = dst_key_gettime(key->key, DST_TIME_INACTIVE, &retire);
144 			retire + ttlsig + dns_kasp_zonepropagationdelay(kasp) +
150 		ksk_remove = retire + dns_kasp_dsttl(kasp) +
211  * 5. If there should be a retire time and it is not set, it will be set now.
222 	isc_stdtime_t active, retire, pub, prepub;
230 	retire = 0;
309 	ret = dst_key_gettime(key->key, DST_TIME_INACTIVE, &retire);
319 		if (ISC_OVERFLOW_ADD(active, klifetime, &retire)) {
320 			log_key_overflow(key->key, "retire");
321 			retire = UINT32_MAX;
323 		dst_key_settime(key->key, DST_TIME_INACTIVE, retire);
332 	 * Publish successor 'prepub' time before the 'retire' time of 'key'.
334 	if (prepub > retire) {
338 	return retire - prepub;
346 	isc_stdtime_t retire;
363 			      "keymgr-manual-mode: block retire DNSKEY "
368 		/* This key wants to retire and hide in a corner. */
371 			      "keymgr: retire DNSKEY %s (%s)", keystr,
381 	ret = dst_key_gettime(key->key, DST_TIME_INACTIVE, &retire);
382 	if (ret != ISC_R_SUCCESS || (retire > now)) {
417 /* Update lifetime and retire and remove time accordingly. */
580  * on whether the key wants to be active, or wants to retire.  This implements
1415 			 * RFC 7583: The retire interval (Iret) is the amount
1417 			 * associated data enters the retire state for any
1434 			 * Only add the sign delay Dsgn and retire-safety if
1464 		 * DS record. This interval is the retire interval
1488 				 * Only add the retire-safety if there is an
1705 	isc_stdtime_t active = 0, pub = 0, syncpub = 0, retire = 0, remove = 0;
1760 	ret = dst_key_gettime(key->key, DST_TIME_INACTIVE, &retire);
1761 	if (retire <= now && ret == ISC_R_SUCCESS) {
1764 		if ((retire + ttlsig) <= now) {
1817 	isc_stdtime_t retire = 0, active = 0, prepub = 0;
2012 				      &retire);
2013 		active = retire;
2016 		 * If prepublication time and/or retire time are
2033 		 * Retire predecessor.
2041 	/* Do we need to set retire time? */
2284 		/* No match, so retire unwanted retire key. */
2351 						 * Retire excess keys in use.
2621 	int rrsig, active, retire;
2627 		retire = DST_TIME_INACTIVE;
2631 		retire = DST_TIME_DELETE;
2666 		result = dst_key_gettime(key, retire, &retire_time);
2678 						buf, "  Key will retire on "));
2811 	isc_stdtime_t active, retire, prepub;
2843 	result = dst_key_gettime(key->key, DST_TIME_INACTIVE, &retire);
2849 		retire = 0;
2861 	retire = when + prepub;
2863 	dst_key_settime(key->key, DST_TIME_INACTIVE, retire);