[Opendnssec-develop] kasp duration notation

Matthijs Mekking matthijs at nlnetlabs.nl
Mon Jul 28 14:35:50 UTC 2014


On 07/28/2014 03:11 PM, Siôn Lloyd wrote:
> On 28/07/14 14:00, Jerry Lundström wrote:
>> On mån, 2014-07-28 at 14:01 +0200, Matthijs Mekking wrote:
>>> Does this require a migration script? People may have policies that
>>> include P[n]W notations.
>> No they may not, because that violates xsd:duration definition and
>> libxml/relaxng will complain and the KASP is not valid. :)
>>
>> This is how we found it, exported signconf via duration2string() and
>> validated it with the old kc_helper functions. We have not run into this
>> before because OpenDNSSEC 1.x converts all times to seconds on signconf
>> export.
>>
>>
> 
> Ah...
> 
> sion at sion:~/work/CTE/RDPapers/ithun$ ods-kaspcheck
> /home/sion/work/opendnssec/install/etc/opendnssec/conf.xml:79: element
> Interval: Relax-NG validity error : Type duration doesn't allow value 'P1W'

If this is ods-kaspcheck 1.x, then...

> So as I understand it this doesn't work currently and we are actually
> talking about a documentation change?
> 
> Then the decision is easy... remove it.

... +1

Matthijs

> 
> Sion
> _______________________________________________
> Opendnssec-develop mailing list
> Opendnssec-develop at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop
> 




More information about the Opendnssec-develop mailing list