[Opendnssec-user] ds-seen on a retired key: standby
Jan-Piet Mens
jpmens.dns at gmail.com
Fri Nov 13 11:30:02 UTC 2015
Hi Yuri,
> I'm unsure there is tooling for that. Though I would expect
>
> ods-ksmutil key ksk-retire --zone tt01 ---cka_id
> 4e7989ca670a7f421fd51d6e9373c271
>
> to have the effect you are looking for.
No, that didn't work, at least not by specifying key tag (no keys in
ACTIVE state match...). I tried all combinations that came to mind; none
worked.
-JP
More information about the Opendnssec-user
mailing list