<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi,<br>
<br>
We have compiled the 2.0.1 version to test with our Luna HSM. We
have added one zone for testing (the policy is like "lab" policy but
using our HSM instead of softhsm), and a lot of ZSK keys (1761) have
been created. It is a new
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<span id="result_box" class="short_text" lang="en"><span class="">behavior
or a bug?</span></span> <br>
<br>
Oct 10 11:03:59 dnssectest ods-enforcerd: [enforcer] updatePolicy:
policyName: testfast_safenet<br>
Oct 10 11:03:59 dnssectest ods-enforcerd: [enforcer] updatePolicy:
New key needed for role KSK<br>
Oct 10 11:03:59 dnssectest ods-enforcerd: [enforcer] updatePolicy:
got new key from HSM<br>
Oct 10 11:03:59 dnssectest ods-enforcerd: 1 zone(s) found on policy
"testfast_safenet"<br>
Oct 10 11:03:59 dnssectest ods-enforcerd: [hsm_key_factory_generate]
122 keys needed for 1 zones covering 31536000 seconds, generating 1
keys for policy testfast_safenet<br>
Oct 10 11:03:59 dnssectest ods-enforcerd: 1 new KSK(s) (2048 bits)
need to be created.<br>
Oct 10 11:04:00 dnssectest ods-enforcerd: [hsm_key_factory_generate]
key generation failed, HSM error: generate key pair: Unknown error<br>
Oct 10 11:04:00 dnssectest ods-enforcerd: 1 zone(s) found on policy
"testfast_safenet"<br>
Oct 10 11:04:00 dnssectest ods-enforcerd: [hsm_key_factory_generate]
2190 keys needed for 1 zones covering 31536000 seconds, generating
1761 keys for policy testfast_safenet<br>
Oct 10 11:04:00 dnssectest ods-enforcerd: 1761 new ZSK(s) (2048
bits) need to be created.<br>
<br>
<Policy name="testfast_safenet"><br>
<Description>Quick turnaround policy for lab
work</Description><br>
<Signatures><br>
<Resign>PT10M</Resign><br>
<Refresh>PT50M</Refresh><br>
<Validity><br>
<Default>PT1H</Default><br>
<Denial>PT1H</Denial><br>
</Validity><br>
<Jitter>PT1M</Jitter><br>
<InceptionOffset>PT30S</InceptionOffset><br>
</Signatures><br>
...<br>
<Keys><br>
<!-- Parameters for both KSK and ZSK
--><br>
<TTL>PT300S</TTL><br>
<RetireSafety>PT360S</RetireSafety><br>
<PublishSafety>PT360S</PublishSafety><br>
<!-- <ShareKeys/> --><br>
<Purge>PT10S</Purge><br>
<br>
<!-- Parameters for KSK only --><br>
<KSK><br>
<Algorithm
length="2048">8</Algorithm><br>
<Lifetime>P3D</Lifetime><br>
<Repository>SafenetLuna7000</Repository><br>
</KSK><br>
<br>
<!-- Parameters for ZSK only --><br>
<ZSK><br>
<Algorithm
length="2048">8</Algorithm><br>
<Lifetime>PT4H</Lifetime><br>
<Repository>SafenetLuna7000</Repository><br>
<!-- <ManualRollover/>
--><br>
</ZSK><br>
</Keys><br>
...<br>
</Policy><br>
<br>
Kind regards<br>
<pre class="moz-signature" cols="72">--
---------------------------------------------
Juan Carlos Rodríguez Merino
NOC RedIRIS
Tel: 912127620 (Ext. 4345)
RedIRIS / Red.es
Edificio Bronce
Plaza de Manuel Gómez Moreno, s/n - 2ª planta
28020 Madrid
---------------------------------------------</pre>
</body>
</html>