lib/dns/keymgr.c

104  * Set the remove time on key given its retire time.
109 	isc_stdtime_t retire = 0, remove = 0, ksk_remove = 0, zsk_remove = 0;
116 	ret = dst_key_gettime(key->key, DST_TIME_INACTIVE, &retire);
124 		zsk_remove = retire + dns_kasp_zonemaxttl(kasp) +
132 		ksk_remove = retire + dns_kasp_dsttl(kasp) +
187  * 5. If there should be a retire time and it is not set, it will be set now.
198 	isc_stdtime_t active, retire, pub, prepub;
206 	retire = 0;
269 	ret = dst_key_gettime(key->key, DST_TIME_INACTIVE, &retire);
286 		retire = active + klifetime;
287 		dst_key_settime(key->key, DST_TIME_INACTIVE, retire);
296 	 * Publish successor 'prepub' time before the 'retire' time of 'key'.
298 	if (prepub > retire) {
302 	return (retire - prepub);
309 	isc_stdtime_t retire;
316 	/* This key wants to retire and hide in a corner. */
317 	ret = dst_key_gettime(key->key, DST_TIME_INACTIVE, &retire);
318 	if (ret != ISC_R_SUCCESS || (retire > now)) {
358 		      ISC_LOG_INFO, "keymgr: retire DNSKEY %s (%s)", keystr,
479  * on whether the key wants to be active, or wants to retire.  This implements
1285 			 * RFC 7583: The retire interval (Iret) is the amount
1287 			 * associated data enters the retire state for any
1301 			 * We will also add the retire-safety interval.
1336 		 * DS record. This interval is the retire interval
1345 		 * We will also add the retire-safety interval.
1552 	isc_stdtime_t active = 0, pub = 0, syncpub = 0, retire = 0, remove = 0;
1607 	ret = dst_key_gettime(key->key, DST_TIME_INACTIVE, &retire);
1608 	if (retire <= now && ret == ISC_R_SUCCESS) {
1611 		if ((retire + zone_ttl) <= now) {
1663 	isc_stdtime_t retire = 0, active = 0, prepub = 0;
1817 				      &retire);
1818 		active = retire;
1821 		 * If prepublication time and/or retire time are
1846 	/* Do we need to set retire time? */
2049 		/* No match, so retire unwanted retire key. */
2378 	int rrsig, active, retire;
2384 		retire = DST_TIME_INACTIVE;
2388 		retire = DST_TIME_DELETE;
2424 		ret = dst_key_gettime(key, retire, &retire_time);
2435 						buf, "  Key will retire on ");
2557 	isc_stdtime_t active, retire, prepub;
2589 	result = dst_key_gettime(key->key, DST_TIME_INACTIVE, &retire);
2595 		retire = 0;
2607 	retire = when + prepub;
2609 	dst_key_settime(key->key, DST_TIME_INACTIVE, retire);
2610 	dst_key_setnum(key->key, DST_NUM_LIFETIME, (retire - active));