[Opendnssec-develop] too many new signatures?

[Patrik Wallström]

This is how it currently looks in my .SE test environment. 2 day  
signatures with 6h jitter. It should not look like this after a couple  
of days signing:

Nov 19 07:17:12 dnssecsigner ods-signerd: Created 237163 new signatures
Nov 19 07:25:08 dnssecsigner ods-signerd: Created 882734 new signatures
Nov 19 09:25:39 dnssecsigner ods-signerd: Created 882842 new signatures
Nov 19 11:17:12 dnssecsigner ods-signerd: Created 160163 new signatures
Nov 19 11:25:02 dnssecsigner ods-signerd: Created 882988 new signatures
Nov 19 13:25:39 dnssecsigner ods-signerd: Created 883109 new signatures

I am running trunk revision 2470. From the last run:

; Last refresh stats: existing: 0, removed 0, created 883109

This is the content of the tmp-dir:

-rw-r--r-- 1 opendnssec pkcs11 144844591 2009-11-19 13:17 se.nsecced
-rw-r--r-- 1 opendnssec pkcs11  92338975 2009-11-19 13:17 se.processed
-rw-r--r-- 1 opendnssec pkcs11 383978634 2009-11-19 13:25 se.signed
-rw-r--r-- 1 opendnssec pkcs11  91727158 2009-11-18 18:02  
se.signed.sorted
-rw-r--r-- 1 opendnssec pkcs11  92252223 2009-11-19 13:16 se.sorted
-rw-r--r-- 1 opendnssec pkcs11 109717100 2009-11-19 13:15 se.unsorted

So it seems that it cannot reuse the old signatures.

Yes, I move the signed zone file from signed/ when I see it and  
deliver it to my destination.

Anybody else seen this or who has any ideas?

-- 
Patrik Wallström
Project Manager, R&D
.SE (Stiftelsen för Internetinfrastruktur)
E-mail: patrik.wallstrom at iis.se
Web: http://www.iis.se/