[Opendnssec-user] Little Problems with OpenDNSSEC

Rickard Bellgrim rickard at opendnssec.org
Wed Jun 22 06:40:56 UTC 2011

On Wed, Jun 22, 2011 at 1:17 AM, Craig Whitmore <lennon at orcon.net.nz> wrote:
> But the KSK is not active..
> ods-ksmutil key list
> SQLite database set to: /var/lib/opendnssec/db/kasp.db
> Keys:
> Zone:                           Keytype:      State:    Date of next
> transition:
> spam.co.nz                      KSK           publish   2011-06-23 00:58:28
> spam.co.nz                      ZSK           active    2011-07-22 10:58:28
> So no DS's show..

The KSK must first propagate. The date of next transition is
2011-06-23 00:58:28. It will then be ready. The Enforcer will then
wait for you to upload the DS and give back the ds-seen.

// Rickard

More information about the Opendnssec-user mailing list