[Opendnssec-user] Key (xxx) has gone straight to active use without a prepublished phase

Volker Janzen voja at voja.de
Wed Aug 3 11:45:15 UTC 2011

Hi Alex,

> It sounds like the auditor has seen a key in active use with no
> prepublished phase. According to the specification (section 3.6.5) :
> http://trac.opendnssec.org/wiki/Signer/AuditorRequirements [1]
> this should raise an error. The error has stopped the signer from
> publishing the zone, so the signatures have expired.

maybe. This is why I want to have an automated way to handle the DS
seen stuff. It's a bit complicated to handle this manual and it appears
to raise errors like this by false ds seen calls.


More information about the Opendnssec-user mailing list