[Opendnssec-develop] Standby key issue

[Rickard Bondesson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

> Is the auditor right? If so, which component should this story be aimed
> at?

Yeah, the auditor is right. Have a look in the corresponding zone config that the enforcer gives to the signer. Is there two keys with flag 257 with tag Publish and one of them with the KSK tag?

If yes, then the problem is in the signer.

If no, then the problem is in the enforcer.

-----BEGIN PGP SIGNATURE-----
Version: 9.8.3 (Build 4028)
Charset: utf-8

wsBVAwUBSuXHEuCjgaNTdVjaAQisXggAigY34xiQknn0AI1S480J0r0Kgs0tZSUo
ISSvAT/C8yk7TGnKZCJwbuYBOUJdM5V48Fn0ZArVfGwkPxGWVUqWWQW0aIdGJtc+
CTrU0vokdgyNXDfhRjeqZzURS/Hx4c1j2Eu+q2ayTmgWP/9A2HRNXoaIFbL2+JFQ
7qYcXdm03PA/W8IfTJBQp/hTbZwgDM41qd8u8LyJv7dWe0j+Gcr1G5fIL1HD1/lm
DRr+aRs7aB7YkmOwCT5hFdB+Kaym+7RC7NXf6ezIHpwLi9WD+fuU8JBNtZV2MIyi
Mul2NHRWzz/v+M0ccowEvWcVYZm5EvZHy4/sJ76poPOAuRC44ht11A==
=MrY+
-----END PGP SIGNATURE-----


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20091026/61918b72/attachment.htm>