[Opendnssec-user] zone serial has gone backwards

Volker Janzen voja at voja.de
Wed Jul 16 17:10:44 UTC 2014


Hi,

no I wasn't aware of this. I can't remember a problem serving this SOA style.

Can I simply lower the SOA in the unsigned zone, or will this cause problems with OpenDNSSEC?


    Volker


> Am 16.07.2014 um 18:56 schrieb Rick van Rein <rick at openfortress.nl>:
> 
> Hi,
> 
>> OpenDNSSEC unsigned: 201406716002
>> OpenDNSSEC signed: 1405493501
> 
> You are aware that the unsigned value is over 2^32, right?
> 
> Also, there is no guarantee that the signer always outputs a higher value than what it receives as its input.  The SOA serial synchronisation is between a pair of client and server, it is not a global value.
> 
> -Rick



More information about the Opendnssec-user mailing list