[Opendnssec-develop] manual Rollover

sion at nominet.org.uk sion at nominet.org.uk
Tue Sep 1 10:40:54 UTC 2009

Hi there,

I've made another change to the enforcer database (svn r1757), a migration
script is provided so please run:

sqlite3 <PATH_TO_ENFORCER.DB> < enforcer/utils/migrate_090901_1.sqlite3

or "ksmutil setup" if you don't want to keep existing data.

This adds the ManualRollover setting for KSKs and ZSKs, preventing the
rollover from happening without "ksmutil rollover <ZONE> <KEYTYPE>" being
called. Everything else carries on as normal, and communicated logs a
message when the rollover is due (and continues to log until the rollover
is done).


More information about the Opendnssec-develop mailing list