[Opendnssec-user] Why does ods-ksmutil key list --all --verbose attempt DNS?

Paul Wouters paul at nohats.ca
Mon Feb 27 22:01:22 UTC 2012


While trying to figure out a large delay in ods-ksmutil, I found via
strace that it is doing a dns lookup?

ods-ksmutil key list --all --verbose

Why would that command perform a dns lookup? And can we get rid of it?

especially on offline signers, this is always going to fail and cause
delays (though stripping /et/resolv.conf will help)


More information about the Opendnssec-user mailing list