--- enforcer/enforcerd/enforcer.c (revision 6951)
+++ enforcer/enforcerd/enforcer.c (revision 6952)
@@ -1291,7 +1291,7 @@
/* turn this zone and policy into a file */
#ifdef ENFORCER_USE_WORKERS
{
- int NewDS;
+ int NewDS = 0;
status2 = commGenSignConf(zone_name, zone_id, current_filename, policy, &signer_flag, config->interval, config->manualKeyGeneration, config->DSSubmitCmd, config->DSSubCKA_ID, &NewDS);
if (status2 == 0) {
/* If the DS set changed then log/do something about it */
--- NEWS (revision 6951)
+++ NEWS (revision 6952)
@@ -1,5 +1,7 @@
$Id: NEWS 6934 2013-01-10 14:32:16Z jerry $
+* OPENDNSSEC-365: Enforcer: Nasty bug where KSKs could get prematurely retired.
+
OpenDNSSEC 1.4.0rc1 - 2013-01-10