[Opendnssec-user] Trying to purge a key with "unknown key state"

Paul Wouters paul at nohats.ca
Wed Jan 9 05:47:35 UTC 2013


On Tue, 8 Jan 2013, Paul Wouters wrote:

>> Does the key show up in a key list command?
>
> Yes it does, and it is also written into the signconf XML. I need this
> key to completely vanish to prevent the signer from crashing.

Using sqlite dump [edit] restore I managed to resolve the situation,
thanks.

It might be useful to not allow different algorithm keys to be
associated to a single zone, since algorithm rollover isn't
supported yet. And it really upsets the signer daemon so it
stops working.

Paul



More information about the Opendnssec-user mailing list