[Opendnssec-user] key export in ods 2.0.1
Fred.Zwarts
F.Zwarts at KVI.nl
Wed Aug 10 13:13:57 UTC 2016
Thanks, this helps a bit.
But "dead", "unknown" and "mixed" still result in "unknown keystate, Error
parsing arguments" when used to export keys.
What should I use to export keys in the states "waiting for ds-seen" and
"waiting for ds-gone"?
(These are the ones (with the -ds option) that are needed during roll-overs
to update the parent zone.)
Thanks for your patience.
Fred.Zwarts.
"Yuri Schaeffer" schreef in bericht
news:37170e1f-d553-1db6-545c-ac2fc7002c62 at nlnetlabs.nl...
> So, to get the export the --keystate option of ods-enforcer must be
> used. I could not find in the documentation how the different keystates
> can be specified. I see that "retire" and "active" are accepted, but
> "ds-seen", or "waiting for ds-seen" result in "unknown keystate, Error
> parsing arguments". Where can I find a list of acceptable keystates?
I made an issue for us to fix this code and documentation. For now, the
code defines the following states:
"generate", "publish", "ready", "active", "retire", "dead", "unknown",
"mixed"
//Yuri
More information about the Opendnssec-user
mailing list