[Opendnssec-user] Opendnssec signer Y2K bug?

Rickard Bellgrim rickard at opendnssec.org
Fri Dec 23 09:39:18 UTC 2011


> Ah yes, I see.
>
> 2011-12-23T08:36:44+01:00 christine ods-signerd: [signconf] zone
> tomhendrikx.nl signconf: RESIGN[PT7200S] REFRESH[PT777600S]
> VALIDITY[PT864000S] DENIAL[PT864000S] JITTER[P] OFFSET[P] NSEC[50]
> DNSKEYTTL[PT3600S] SOATTL[PT3600S] MINIMUM[PT3600S] SERIAL[datecounter]
> AUDIT[1]
>
> kasp.xml for this zone is attached, and gives other values for refresh,
> validity and denial. Running 'ods-ksmutil update all' outputs
> 'ods-enforcerd: No change to:
> /var/lib/opendnssec/signconf/tomhendrikx.nl.xml', but the signconf xml does
> have the values as listed in the signconf log line above, and not the values
> from kasp.xml

The Enforcer only sends the times in seconds to the Signer Engine. The
values match your kasp.xml. So no problem here. Then the issue is
somewhere else.

// Rickard



More information about the Opendnssec-user mailing list