[Opendnssec-develop] remove key?

sion at nominet.org.uk sion at nominet.org.uk
Tue Dec 15 11:40:31 UTC 2009


> if I have a key in publish state, and I want to remove it
> prematurely - can that be done?

not with ods-ksmutil.

If you are feeling brave then you could do something like:

sqlite3 kasp.db
update keypairs set state = 6 where HSMkey_id = <CKA_ID>;

(More correctly you would want to set the "dead" field to the current date
also, but I don't think that this is required.)

Sion




More information about the Opendnssec-develop mailing list