[Opendnssec-user] For <update> Command, Adding and Removing DS Data
mat at mat.cc
Wed May 28 15:58:41 UTC 2014
+--On 28 mai 2014 17:05:51 +0200 Ramanou BIAOU <ramanou at netim.com> wrote:
| Dear All,
| I would like your opinion on the<update> Command, Adding and Removing DS
| Between these two modes which is best adapted to make update DS recording
| to register. Advantage and disadvantage of each.
I do an even different version:
- The DelegationSignerSubmitCommand only adds new DS.
- A second, cronned, script goes and have a look at the keys in the waiting
for ds-seen state, and looks for the DS, when it finds them, it sens the
- A third, cronned, script goes and make sure that all keys in the "retire"
state are, indeed, removed from the parent zones.
Both cronned script run every four hour, with a RetireSafety = 1D, it's
never failed me :-)
More information about the Opendnssec-user