[Opendnssec-develop] Policy configuration checker
Matthijs Mekking
matthijs at NLnetLabs.nl
Tue Aug 11 13:00:16 UTC 2009
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I was thinking of adding a check <SOA><Serial>keep</Serial></SOA>
implies no continuously resigning. Things will break if you allow this
combination.
I think it fits perfectly in the policy configuration checker.
Matthijs
Alexd at nominet.org.uk wrote:
> Are there any other useful checks which should be performed?
>
> Thanks,
>
>
> Alex.
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Opendnssec-develop mailing list
> Opendnssec-develop at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iQEcBAEBAgAGBQJKgWteAAoJEA8yVCPsQCW5/0IH/ji+TuiO1JbPj+/n5kVh8tkC
erqMIMgC2P/VEKz6T+HPSesDfTzL20OH3blmO9mOnViU+OyoF7RgQIovDNjSSvDA
idACJxkbPNZpH9XeXKsyMTnVXTG1ntXlJaBW+JAAue4hfkfvXmkNWUPxWzUvsSiB
wXN5Wbn8CQq+siY4l9W53rq8Z2+UMwaztqScK3OZsG1wMa/T120F9vEpkJAkL9KQ
vr8oaM99JXfrTrYCD4+7mZoQZddAOf1peWeDM2mNHJW2WniclH3FkNHk/sOlXOb5
XqHoaxR9dK5+BpbdHI2QWIp8WqF6amJsvDX6u8yPgA7fstqMuNPsX9ESd6bYMuw=
=NlOb
-----END PGP SIGNATURE-----
More information about the Opendnssec-develop
mailing list