Blob Blame History Raw
--- enforcer/enforcerd/enforcer.c   (revision 6951)
+++ enforcer/enforcerd/enforcer.c   (revision 6952)
@@ -1291,7 +1291,7 @@
                 /* turn this zone and policy into a file */
 #ifdef ENFORCER_USE_WORKERS
                 {
-                    int NewDS;
+                    int NewDS = 0;
                     status2 = commGenSignConf(zone_name, zone_id, current_filename, policy, &signer_flag, config->interval, config->manualKeyGeneration, config->DSSubmitCmd, config->DSSubCKA_ID, &NewDS);
                     if (status2 == 0) {
                         /* If the DS set changed then log/do something about it */
--- NEWS    (revision 6951)
+++ NEWS    (revision 6952)
@@ -1,5 +1,7 @@
 $Id: NEWS 6934 2013-01-10 14:32:16Z jerry $
 
+* OPENDNSSEC-365: Enforcer: Nasty bug where KSKs could get prematurely retired.
+
 
 OpenDNSSEC 1.4.0rc1 - 2013-01-10