[Opendnssec-develop] Not keeping serial after upgrade

Matthijs Mekking matthijs at NLnetLabs.nl
Tue Apr 5 08:07:40 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

On 04/05/2011 08:55 AM, Jakob Schlyter wrote:
> On 5 apr 2011, at 08.51, Rickard Bellgrim wrote:
> 
>> I think that we at least should be able to restore the old output serial.
> 
> I agree.
> 
>> Should we have a migration script? Or should the Signer Engine try to use the .state if the .backup does not exist?
> 
> A backward compat fix for this specific issue seems least intrusive for the users - a migration script feels wrong.
> 
> 	j

I was still thinking of what the best solution would be. I am happy to
write one or the other.

If a backward compat fix is the way, I must ask: do we also need to make
the parts for backing up the task, signer configuration, denial of
existence and signatures backwards compatible? (or is it sufficient to
do the serial maintenance part?).

Best regards,

Matthijs
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJNms3MAAoJEA8yVCPsQCW5ujIH/0AwOY8iHlVOvtYfDPoRR3pf
MT8GtwuQwaE1cRJhO1Nz9AeLZQJrcgdgGPAUjyHtgXV8nkqkvYAXkk29l6+hi+u/
x3OesGrWunOJGvbLLQOOlD1211EBKXmmuS5dYjWeD+wCcHeErGofo9wH38clXhnW
5gxF4izbDK/VMBQLToN6f29GG7TdOWZVIVzupzi7jg0rHTZVLTzIayRAGYkHVLUa
6f5BtQ/hpvgywfrqNiPr4Zrqc7o+jNT97rdNXjVUVbAb0wwT5LyIVdRw1VsmzIAN
/yLbOwvIkniuwHhCJTLQpFNYgw4kN5xFhuVWHSnLbnizYD649N+BSDwXA+uXMPw=
=kgp8
-----END PGP SIGNATURE-----



More information about the Opendnssec-develop mailing list