[Opendnssec-user] Being notified of a ZSK rollover?

Rickard Bellgrim rickard.bellgrim at iis.se
Wed Feb 3 09:02:37 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

> I would like to know when a ZSK rollover takes place. In conf.xml,
> there is <NotifyCommand> for the signer, but I find no equivalent for
> key rollovers. (The only workaround seems to be a parsing of the
> syslog files.)

There will be a "notify" for KSK for 1.1, but not ZSK. The receiving command must accept the zone name and current set of KSKs that OpenDNSSEC want to publish at the parent.

What is your idea of ZSK rollover notification?

// Rickard

-----BEGIN PGP SIGNATURE-----
Version: 9.8.3 (Build 4028)
Charset: utf-8

wsBVAwUBS2k7reCjgaNTdVjaAQiAAwf8D6wecjR2uMGETmbzTGKUBRa+hXWSFPCV
9It3AdzEd4C/gcHXN20Sc5YmkGfUwqmHZNe70aCIsg1PbUVcVcx3rNOAmDtx1vyk
fuGbCL660yVxU9Q+PVv5oN+K4weYu39gFYKlz3ahn5DczRSUwpSyFB/XXLEttpAd
grC1D03/qoiUJZwLUldg+tIPouXE1OAoDqnNGM/fL302UvY6hAmK04fybK4T4QZN
kHXM0fK+GubUlOjUJQnYV333RFnN+fdKZE7AcSZxTaRaCJ7ly6rophBB+XXvGvYo
ABwN1qZu74JpPs5vfqSiosgmkUO+8HW09bL7PKQyfhJzpk3vD2bXdA==
=h5iH
-----END PGP SIGNATURE-----


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20100203/8ba62008/attachment.htm>


More information about the Opendnssec-user mailing list