[Opendnssec-user] Key has gone straight to active use ..

Matthijs Mekking matthijs at nlnetlabs.nl
Wed May 23 08:12:34 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It would be nice if the auditor had a 'clear state' command (e.g.
remove all files related to a particular zone from the auditor working
directory 'tracker').

Best regards,
  Matthijs

On 05/22/2012 02:47 PM, Alex Dalitz wrote:
> 
> On 22 May 2012, at 09:37, Sander Smeenk wrote:
> 
>> 2) Disable the auditor in my OpenDNSSEC configuration so the
>> signed zone gets accepted with the
>> key-that-has-not-undergone-all-states
> 
> I think this is your best option. If the only issue preventing the
> zone being published is this message, then it should be fine to
> disable the auditor, publish the zone, and enable the auditor
> again.
> 
> There is no command-line option to override auditor check - this
> must currently be done in the XML.
> 
> Thanks,
> 
> 
> Alex._______________________________________________ 
> Opendnssec-user mailing list Opendnssec-user at lists.opendnssec.org 
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPvJvxAAoJEA8yVCPsQCW5VmcH/R0PlxI+LYtWGapqa/JTnomQ
drYAzEOadYttj/2EOmV3Xx7iI7BFQqp8RPVm9n6RBpydscGymJkCdTbd0yIVeb28
9vi35K+jhPWk+T3Z4q5kcxknAZ8/reZLSXv/5qIFO929lqUFB+Q3MCf9u+Ua+5lu
BFgNkQU5uYq6EM3QAI4T3as4HMF1SlcGN6nlgcnDvPfhaOkREcmASQVdG2t7B2VY
L8qrhDclnxoxmZfWEDtMRtnX9lwbGqEop849JUNkU1KeS0jQhyCqZP27K0n2vqMu
CMWkTWOeIeODcVLAyEEZ6Zt8OZDviMHRlwr95pLtX2WtSeNWv8TlMN4FfhusObM=
=90EK
-----END PGP SIGNATURE-----



More information about the Opendnssec-user mailing list