[Opendnssec-user] Empty zonelists not permitted?

Rick van Rein rick at openfortress.nl
Tue Jul 6 12:40:01 UTC 2010


> I had certainly never thought about starting a system with a "blank slate" 
> like this; so I am not surprised that it doesn't work.

Ah.  So no magical reason why there is a need for a "colourful state" :-)
It's not just the initial state where this might occur, but --in theory-- it is
possible that all customers unsubscribed at the same time.  It'd be great if
the system kept working then.

> Without a command to add new policies you presumably have to edit the xml and 
> then run "ods-ksmutil update kasp"?

We generate XML files and run "update all" (to load kasp.xml as well as
zonelist.xml) but yeah, that's the idea.  I worked around it by creating a
stub zone if none exists, but felt this was something that could be made more
beautiful and more failsafe.  It'll certainly smooth the ride for registrars
who start off with OpenDNSSEC (with a zero customer base, presumably).

Hope this was helpful.  We'll manage :)


More information about the Opendnssec-user mailing list