[Opendnssec-user] keys NOT IN repository

Siôn Lloyd sion at nominet.org.uk
Thu Dec 18 14:52:16 UTC 2014


On 18/12/14 12:38, Emil Natan wrote:
> Hello,
> 
> Can someone please explain when and why keys are created "NOT IN
> repository"?

Hi Emil,

Is there a chance that these keys were created and then deleted? That is
the most likely scenario I can think of.

If not, were any errors logged during key generation?

Sion

> 
> root at debugsigner002:~# ods-ksmutil key list --zone w3c.org
> <http://w3c.org> -v
> Zone:                           Keytype:      State:    Date of next
> transition (to):  Size:   Algorithm:  CKA_ID:                          
> Repository:                       Keytag:
> w3c.org <http://w3c.org>                      KSK           publish  
> 2014-12-18 18:30:53 (ready)    2048    8          
> 328387cdfb9fae6a5bf27082dc0b858b  Keyper NOT IN repository
> w3c.org <http://w3c.org>                      ZSK           active  
>  2015-04-21 14:25:53 (retire)   1024    8          
> 6833a76d1e0834504e43c1ae47b66646  Keyper NOT IN repository
> 
> Thanks.
> Emil
> 
> 
> _______________________________________________
> Opendnssec-user mailing list
> Opendnssec-user at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
> 




More information about the Opendnssec-user mailing list