[Opendnssec-user] ZSK in use too long

Gilles Massen gilles.massen at restena.lu
Wed Sep 1 13:21:49 UTC 2010


Hello all,

For 2 of my signed zones the auditor is complaining that the used "ZSK
29745 in use too long". And it's complaining rightly so. What I don't
understand is why ZSKs haven't been rolled: there is a "ready" ZSK for
the zone in the key list, and the lifetime of the ZSK has expired for
over a week.

Any hints what to look for?
(v 1.1.1.)

Gilles

-- 
Fondation RESTENA - DNS-LU
6, rue Coudenhove-Kalergi
L-1359 Luxembourg
tel: (+352) 424409
fax: (+352) 422473



More information about the Opendnssec-user mailing list