[Opendnssec-develop] Policy configuration checker

Matthijs Mekking matthijs at NLnetLabs.nl
Tue Aug 11 13:00:16 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I was thinking of adding a check <SOA><Serial>keep</Serial></SOA>
implies no continuously resigning. Things will break if you allow this
combination.

I think it fits perfectly in the policy configuration checker.

Matthijs

Alexd at nominet.org.uk wrote:
> Are there any other useful checks which should be performed?
> 
> Thanks,
> 
> 
> Alex.
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Opendnssec-develop mailing list
> Opendnssec-develop at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBAgAGBQJKgWteAAoJEA8yVCPsQCW5/0IH/ji+TuiO1JbPj+/n5kVh8tkC
erqMIMgC2P/VEKz6T+HPSesDfTzL20OH3blmO9mOnViU+OyoF7RgQIovDNjSSvDA
idACJxkbPNZpH9XeXKsyMTnVXTG1ntXlJaBW+JAAue4hfkfvXmkNWUPxWzUvsSiB
wXN5Wbn8CQq+siY4l9W53rq8Z2+UMwaztqScK3OZsG1wMa/T120F9vEpkJAkL9KQ
vr8oaM99JXfrTrYCD4+7mZoQZddAOf1peWeDM2mNHJW2WniclH3FkNHk/sOlXOb5
XqHoaxR9dK5+BpbdHI2QWIp8WqF6amJsvDX6u8yPgA7fstqMuNPsX9ESd6bYMuw=
=NlOb
-----END PGP SIGNATURE-----



More information about the Opendnssec-develop mailing list