[Opendnssec-user] Force a fast key rollover
Sebastian Castro
sebastian at nzrs.net.nz
Thu Jun 27 23:53:17 UTC 2013
On 28/06/13 03:15, Klaus Darilion wrote:
> Hi!
Hi!,
>
> When initiating a key rollover, OpenDNSSEC does not immediately use the
> new key, but uses the PUBLISH state (at least for ksk) for some time
> before activating the key (before "waiting for DS"),
>
> How can I force ODS to immediately activate a new KSK and ZSK, without
> these "pre-activate" phases?
Do you have a use case for that? Unless is the first publication of a
signed zone, you don't want to skip the PUBLISH phase.
Cheers,
>
> Thanks
> Klaus
> _______________________________________________
> Opendnssec-user mailing list
> Opendnssec-user at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
--
Sebastian Castro
DNS Specialist
.nz Registry Services (New Zealand Domain Name Registry Limited)
desk: +64 4 495 2337
mobile: +64 21 400535
More information about the Opendnssec-user
mailing list