[Opendnssec-user] key export in ods 2.0.1

Fred.Zwarts F.Zwarts at KVI.nl
Wed Aug 10 13:13:57 UTC 2016

Thanks, this helps a bit.
But "dead", "unknown" and "mixed" still result in "unknown keystate, Error 
parsing arguments" when used to export keys.

What should I use to export keys in the states "waiting for ds-seen" and 
"waiting for ds-gone"?
(These are the ones (with the -ds option) that are needed during roll-overs 
to update the parent zone.)

Thanks for your patience.

"Yuri Schaeffer"  schreef in bericht 
news:37170e1f-d553-1db6-545c-ac2fc7002c62 at nlnetlabs.nl...

> So, to get the export the --keystate option of ods-enforcer must be
> used. I could not find in the documentation how the different keystates
> can be specified. I see that "retire" and "active" are accepted, but
> "ds-seen", or "waiting for ds-seen" result in "unknown keystate, Error
> parsing arguments". Where can I find a list of acceptable keystates?

I made an issue for us to fix this code and documentation. For now, the
code defines the following states:

"generate", "publish", "ready", "active", "retire", "dead", "unknown",


More information about the Opendnssec-user mailing list