[Opendnssec-user] time issues

[Fredrik Pettai]

Hi,

I noticed time(ing) issues with OpenDNSSEC. In the log I get entries like this:

Jan  1 19:54:10 hidden-master ods-auditor[19565]: RRSet (eduid.se, SOA) failed verification : Signature record not in validity period, tag = 16246
Jan  1 19:54:10 hidden-master ods-auditor[19565]: Inception error for eduid.se, SOA : Signature inception is 1356976449, time now is 1325444050, inception offset is 3600, difference = -31532399

The generated SOA serial also looks fishy:

from eduid.se.inbound:
@               IN      SOA     hidden-master.sunet.se. hostmaster.sunet.se. (
                                2011121300      ; !!SERIAL!!
                                28800       
                                7200         
                                604800    
                                60             

from eduid.se.finalized:
eduid.se.       86400   IN      SOA     hidden-master.sunet.se. hostmaster.sunet
.se. 2026202100 28800 7200 604800 300 

And in the signed dir, I find an older copy, with this:
eduid.se.       86400   IN      SOA     hidden-master.sunet.se. hostmaster.sunet
.se. 2011123100 28800 7200 604800 300

Any hints where I should continue to do debugging?

Re,
/P