[Opendnssec-user] Message: Cannot keep input serial 2010070514, output serial 2010070514 is too large. Aborting operation

Rickard Bellgrim rickard.bellgrim at iis.se
Mon Jul 5 13:29:06 UTC 2010

On 5 jul 2010, at 15.18, Carsten Strotmann (Men&Mice) wrote:

> Why is 2010070514 too large? Is this anything to be concerned about

If you use the SOA serial mode "keep", then the output serial must be smaller than the input serial. Otherwise will the signer not sign your zone. The signer will try each resign period until you have updated the SOA serial in the unsigned zone.

// Rickard

More information about the Opendnssec-user mailing list