[Opendnssec-user] ods-hsmutil

Paul Wouters paul at nohats.ca
Tue Jul 24 15:51:57 UTC 2012


On Tue, 24 Jul 2012, Siôn Lloyd wrote:

>> Does ODS generate the rollover tiemstamps for all future keys at that
>> generation time ? Eg, can you copy the kasp.db after generating the keys
>> and have identical future rollover timestamps for multiple signers?
>
> No, it does not pre-allocate keys to zones or pre-define the lives of the 
> keys until it has to.

Are there any plans to change that to support failover/backup signers
that would not depend on a constant feed of db files?

Paul



More information about the Opendnssec-user mailing list