[Opendnssec-user] Message: Cannot keep input serial 2010070514, output serial 2010070514 is too large. Aborting operation

[Rickard Bellgrim]

On 5 jul 2010, at 15.18, Carsten Strotmann (Men&Mice) wrote:

> Why is 2010070514 too large? Is this anything to be concerned about

If you use the SOA serial mode "keep", then the output serial must be smaller than the input serial. Otherwise will the signer not sign your zone. The signer will try each resign period until you have updated the SOA serial in the unsigned zone.

// Rickard