[Opendnssec-develop] KSK rollover - current plan

sion at nominet.org.uk sion at nominet.org.uk
Tue Nov 10 00:28:04 UTC 2009


> Do you need to use the keytag? Won't the system know which keys we
> are talking about when using either --zone or --policy?
>
> If we must use the keytag, can we handle keytag collisions?

I was thinking that there may be more than one key in the ready state for
any given zone/policy... If there is a keytag collision then I was going to
report back with the cka_ids involved and give the option of either one?

Sion




More information about the Opendnssec-develop mailing list