[Opendnssec-develop] from xml to DB

Jakob Schlyter jakob at kirei.se
Mon Apr 20 15:15:30 UTC 2009


On 20 apr 2009, at 16.48, John Dickinson wrote:

>> anything that doesn't make me run the kaspimporter when I've  
>> changed config.xml would be nice, so I think (a) is nice.
>
> Well you would still have to update the policy and DB some how so  
> that policies start using the new hsm. Options (a) and (b) are  
> really two different ways to reference the repository in config.xml  
> (a) allows us to use the current <Name> element (b) would allow the  
> referring entry in the DB to be a regular parameter like the rest of  
> the policy (key - integer value pair). Option (c) is just how I  
> imagined it would work originally :)

the repostory name is only used when creating new keys, right?  
locating them is done by libhsm (or whatever name we pick).
so it kind of makes sense to have the importer read it I guess.

> BTW does relax-ng allow us to state that <Name> must be unique?

nope.


	jakob




More information about the Opendnssec-develop mailing list