[Opendnssec-user] Re: Duration key mamagament

Stéphane Diacquenod sdiacque at citic74.fr
Mon Feb 22 18:02:17 UTC 2010


On 22.02.2010 09:43, Stephane Bortzmeyer wrote:
> On Fri, Feb 19, 2010 at 02:23:21PM +0100,
>   Stéphane Diacquenod<sdiacque at citic74.fr>  wrote
>   a message of 31 lines which said:
>
>    
>> Isn't it possible to configure the duration of each state ?
>> e.g. :
>> Publish P5D ->Ready P30D->Active P30D ->Retire P30D->DEAD
>>      
> Why do you want to do so? The point of OpenDNSSEC is to save you from
> timing calculations. If you do it manually, you have to be extra
> careful and you lose the benefit of automation.
>    
Yes,
but I have got some difficulty for find the good parameter during my test.
Now my configuration is ok and I have always a Ready key for the 
emergency rollover.
Thanks


-- 
Stéphane Diacquenod
Apprenti Ingénieur
CITIC74




More information about the Opendnssec-user mailing list