[Opendnssec-develop] Re: [OpenDNSSEC] #161: Patch: 2-phase key backup for ksmutil
OpenDNSSEC
owner-dnssec-trac at kirei.se
Mon Sep 6 07:42:45 UTC 2010
#161: Patch: 2-phase key backup for ksmutil
------------------------+---------------------------------------------------
Reporter: vanrein | Owner: sion
Type: enhancement | Status: new
Priority: major | Component: Enforcer
Version: | Keywords: 2-phase backup
------------------------+---------------------------------------------------
Comment(by vanrein):
A comment about this/our patch to 2-phase key backup: We did not spot all
the places where information about the key types is located in code;
concretely, this can lead to reports about unrecognised key state 11.
This state 11 is the intermediate state that we introduced as the
temporary state between prepare and commit.
This message occured when we folded two OpenDNSSEC cycles in one another;
that is, before having backed up keys for a new zone, we already submitted
new ones and notified the enforcer of the change. The message appears to
be harmless.
The problem is hereby documented alongside our patch in trac; please note
that the branch has 2-phase key backup that is likely to be better
integrated with the rest of the KASP Enforcer.
--
Ticket URL: <http://trac.opendnssec.org/ticket/161#comment:3>
OpenDNSSEC <http://www.opendnssec.org/>
OpenDNSSEC
More information about the Opendnssec-develop
mailing list