[Opendnssec-user] RRSIG for hobby.nl expires soon
S.P.Armitage at lboro.ac.uk
Wed Jul 4 13:55:45 UTC 2012
On 4 Jul 2012, at 14:40, Bas van den Dikkenberg wrote:
> Hi i have problem with rrsig's that are expiring.
> In the kaspl it states that the rrsig's must be refresh 3d before they expire.
> But opendnssec doesn't refresh them.
> This is in my kaspl.xml
> But nagios reports: WARNING: check_dnssec_expiration - RRSIG for hobby.nl expires soon (20120705141400).
> Any sugestions ?
I have noticed the same problem. I have had time to look into so hadn't posted to the list. Whilst ODS never lets the signatures expire, it does seem to operate outside of its refresh window.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 203 bytes
Desc: Message signed with OpenPGP using GPGMail
More information about the Opendnssec-user