[Opendnssec-user] Re: OpenDNSSEC 1.3.0b1

Rickard Bellgrim rickard.bellgrim at iis.se
Tue Apr 12 08:59:04 UTC 2011


Hi Tom

On 23 mar 2011, at 22.02, Tom Hendrikx wrote:

> The unsigned zone file has serial '1' (to remind me that the serial is 
> controlled by opendnssec), the signed/published zone file has 2011032302 
> (serial=datecounter in kasp.xml)
> 
> It seems to me as if serial=datecounter was simplified to use today's 
> date, but does not account for the serial updates that already have been 
> done on the same day. I'll wait and see if it gets resolved by itself 
> when the date changes to 20110324...

The Signer Engine is now backward compatible with the old backup files and can thus recover the previous SOA serial. Only the state is recovered, new signatures will be generated.

// Rickard




More information about the Opendnssec-user mailing list