[Opendnssec-develop] Re: [OpenDNSSEC] #161: Patch: 2-phase key backup for ksmutil

OpenDNSSEC owner-dnssec-trac at kirei.se
Mon Sep 6 07:42:45 UTC 2010


#161: Patch: 2-phase key backup for ksmutil
------------------------+---------------------------------------------------
Reporter:  vanrein      |       Owner:  sion          
    Type:  enhancement  |      Status:  new           
Priority:  major        |   Component:  Enforcer      
 Version:               |    Keywords:  2-phase backup
------------------------+---------------------------------------------------

Comment(by vanrein):

 A comment about this/our patch to 2-phase key backup: We did not spot all
 the places where information about the key types is located in code;
 concretely, this can lead to reports about unrecognised key state 11.
 This state 11 is the intermediate state that we introduced as the
 temporary state between prepare and commit.

 This message occured when we folded two OpenDNSSEC cycles in one another;
 that is, before having backed up keys for a new zone, we already submitted
 new ones and notified the enforcer of the change.  The message appears to
 be harmless.

 The problem is hereby documented alongside our patch in trac; please note
 that the branch has 2-phase key backup that is likely to be better
 integrated with the rest of the KASP Enforcer.

-- 
Ticket URL: <http://trac.opendnssec.org/ticket/161#comment:3>
OpenDNSSEC <http://www.opendnssec.org/>
OpenDNSSEC


More information about the Opendnssec-develop mailing list