[Opendnssec-user] DNSKEY will expire in 11.6381365740741 days (kskwarn is 12.0)

Rick van Rein rick at openfortress.nl
Tue Dec 10 10:15:52 UTC 2013


Volker,

> I think I might have a configuration error in OpenDNSSEC. I want it to resign the whole zone once in 14 days, that Nagios starts warning me 12 days before it expires. My kasp.xml should be default:

One potential source of these errors is if the signer cannot read your zone, gets confused and stops generating signatures.  This should be very loud in your log files, because it keeps running into those problems every hour or so.  Please be sure to have checked those.

-Rick




More information about the Opendnssec-user mailing list