<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hello,<br>
<br>
When using OpenDNSSEC, I see that DNSKEY sets are signed with
KSK`s that are in the retire state. <br>
Why does this happen ? I would expect that only keys in the active
or ready state would be used for signing the DNSKEY set. In a test
zone where I have 3 KSK`s; one in the ready, one in the active, and
one in the retire state. I see that all 3 KSK are used to generate
a signature, so there are now 3 DNSKEY RRSIG`s in my zonefile. <br>
<br>
With kind regards, <br>
<br>
<br>
<br>
<br>
<div class="moz-signature">-- <br>
<table
style="color:#000000;font-family:georgia;font-size:8pt;line-height:12pt;margin-left:-4px;padding:0;">
<tbody>
<tr>
<td style="font-size:10pt;line-height:12pt;"> Maurice Mahieu
</td>
</tr>
<tr>
<td
style="font-size:10pt;line-height:12pt;padding-bottom:10pt;">
System Engineer | <a href="mailto:maurice@info.nl"
style="color:#000;text-decoration:none;">maurice@info.nl</a>
| <a href="tel:+31205309111"
style="color:#000;text-decoration:none;">+31 (0)20 53 09
111</a> </td>
</tr>
<tr>
<td style="font-size:10pt;line-height:16pt;padding-bottom:0;
padding-top: 3px;"> <a href="http://www.info.nl"
style="text-decoration:none;"> <span
style="background-color:#000;color:#fff;font-size:13pt;text-decoration:none;display:inline-block;padding:4px
3px
1px;line-height:1;margin-bottom:-5px;margin-right:-5px;-webkit-font-smoothing:
antialiased;"><no link="">info.nl</no></span> </a>
<a
href="http://www.info.nl/nl?utm_source=e-mail_sig&utm_medium=e-mail&utm_term=connecting_the_dots&utm_campaign=info_sig"
style="color:#000;text-decoration:none;"><em
style="color:#000;text-decoration:none;">making
platforms work</em></a> </td>
</tr>
<tr>
<td
style="font-family:georgia;font-size:10pt;line-height:12pt;color:#000;
padding-top: 0;"> Sint Antoniesbreestraat 16 | 1011 HB
Amsterdam | <a href="tel:+31205309100"
style="color:#000;text-decoration:none;">+31 (0)20 530
91 00</a> </td>
</tr>
<tr>
<td style="font-size:10pt;line-height:12pt;"> <a
style="color:#000;text-decoration:none;"
href="https://www.facebook.com/infonl">Facebook</a> | <a
style="color:#000;text-decoration:none;"
href="https://twitter.com/infonl">Twitter</a> | <a
style="color:#000;text-decoration:none;"
href="https://www.linkedin.com/company/info.nl">LinkedIn</a> |
<a style="color:#000;text-decoration:none;"
href="https://plus.google.com/+infonl/">Google+</a> </td>
</tr>
</tbody>
</table>
</div>
</body>
</html>