[Opendnssec-user] two small requests for ods-ksmutil

Miek Gieben miek.gieben at sidn.nl
Mon Mar 12 08:32:31 UTC 2012


[ Quoting Paul Wouters at 23:33 on March 11 in "[Opendnssec-user] two small request"... ]
> Two small feature requests...
> 
> See this example:
> 
> active    2012-03-12 11:05:08 (retire)   1024    8           c842110e1409d9f6289c5ff5fe793b61  AEP                               4450
> publish   2012-03-12 10:05:10 (ready)    1024    8           382ffeea9db6a814d0a573717232a707  AEP                               37491
> 
> 1) Leading zeroes
> 
> When trying to sign with both bind and opendnssec, some conversions need
> to happen. We need to grab the current KSK and ZSK from where, so we can
> run dnssec-keyfromlabel. Since we are dealing with filenames generated
> based on keytag and algorithm, there is this annoying issue with leading
> zeros for both the key tag and the algorithm. Could opendnssec print
> leading in this screen?

Huh? What exactly is the problem here? I just use the CKA_ID in
dnssec-keyfromlabel and that works very nicely.

grtz Miek



More information about the Opendnssec-user mailing list