From a47bb8fc24286cfb87fef421f11065a86a6a3150 Mon Sep 17 00:00:00 2001 From: Shreyas Zare Date: Sat, 21 May 2022 12:58:55 +0530 Subject: [PATCH] DnssecPrivateKey: Updated RolloverDays to add one more validation check. --- DnsServerCore/Dns/Dnssec/DnssecPrivateKey.cs | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/DnsServerCore/Dns/Dnssec/DnssecPrivateKey.cs b/DnsServerCore/Dns/Dnssec/DnssecPrivateKey.cs index 184d7820..cd54ffcc 100644 --- a/DnsServerCore/Dns/Dnssec/DnssecPrivateKey.cs +++ b/DnsServerCore/Dns/Dnssec/DnssecPrivateKey.cs @@ -347,10 +347,13 @@ namespace DnsServerCore.Dns.Dnssec case DnssecPrivateKeyState.Published: case DnssecPrivateKeyState.Ready: case DnssecPrivateKeyState.Active: + if (_isRetiring) + throw new InvalidOperationException("Zone Signing Key (ZSK) automatic rollover cannot be set since it is set to retire."); + break; default: - throw new ArgumentOutOfRangeException(nameof(RolloverDays), "Zone Signing Key (ZSK) automatic rollover cannot be set due to invalid key state."); + throw new InvalidOperationException("Zone Signing Key (ZSK) automatic rollover cannot be set due to invalid key state."); } } else