[Opendnssec-user] ds-seen on a retired key: standby

Jan-Piet Mens jpmens.dns at gmail.com
Fri Nov 13 11:30:02 UTC 2015


Hi Yuri,

> I'm unsure there is tooling for that. Though I would expect
> 
> ods-ksmutil key ksk-retire --zone tt01 ---cka_id
> 4e7989ca670a7f421fd51d6e9373c271
> 
> to have the effect you are looking for.

No, that didn't work, at least not by specifying key tag (no keys in
ACTIVE state match...). I tried all combinations that came to mind; none
worked.

        -JP



More information about the Opendnssec-user mailing list