[Opendnssec-user] RRSIG for hobby.nl expires soon

[Bas van den Dikkenberg]

Hi i have problem with rrsig's that are expiring.

In the kaspl it states that the rrsig's must be refresh 3d before they expire.
But opendnssec doesn't refresh them.

This is in my kaspl.xml

                <Signatures>
                        <Resign>PT2H</Resign>
                        <Refresh>P3D</Refresh>
                        <Validity>
                                <Default>P7D</Default>
                                <Denial>P7D</Denial>
                        </Validity>
                        <Jitter>PT12H</Jitter>
                        <InceptionOffset>PT3600S</InceptionOffset>
                </Signatures>



But nagios reports: WARNING: check_dnssec_expiration - RRSIG for hobby.nl expires soon (20120705141400).

Any sugestions ?


With kind regards,


Bas van den Dikkenberg


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20120704/cccc30e4/attachment.htm>