[Opendnssec-user] Date of next transition in the past.

[Fred.Zwarts]

# ods-enforcer key list --zone 37.125.129.in-addr.arpa
Keys:
Zone:                           Keytype: State:    Date of next transition:
37.125.129.in-addr.arpa         KSK      retire    2016-08-11 04:53:24
37.125.129.in-addr.arpa         KSK      active    2016-08-11 04:53:24
37.125.129.in-addr.arpa         ZSK      retire    2016-08-11 04:53:24
37.125.129.in-addr.arpa         ZSK      active    2016-08-11 04:53:24
37.125.129.in-addr.arpa         ZSK      ready     2016-08-11 04:53:24
key list completed in 0 seconds.
# ods-enforcer queue
There are 2 tasks scheduled.
It is now Fri Aug 12 09:13:24 2016 (1470986004 seconds since epoch)
Next task scheduled Fri Aug 12 16:33:10 2016 (1471012390 seconds since 
epoch)
On Fri Aug 12 16:33:10 2016 I will [enforce] KVI.nl
On Fri Nov 18 11:10:04 2016 I will [resalt] policies
queue completed in 0 seconds.
# date
Fri Aug 12 09:14:01 CEST 2016
#

Is it normal that only KVI.nl is mentioned in the queues, not the other 
domains?

Fred.Zwarts.



"Yuri Schaeffer"  schreef in bericht 
news:fa5bd541-5887-e339-3932-61dfc6b50bbe at nlnetlabs.nl...

> Today I noticed something else on our test system with ods 2.0.1:
>
> # date
> Thu Aug 11 15:48:31 CEST 2016
> # ods-enforcer key list --zone 37.125.129.in-addr.arpa
> Keys:
> Zone:                           Keytype: State:    Date of next 
> transition:
> 37.125.129.in-addr.arpa         KSK      retire    2016-08-11 04:53:24
> 37.125.129.in-addr.arpa         KSK      active    2016-08-11 04:53:24
> 37.125.129.in-addr.arpa         ZSK      retire    2016-08-11 04:53:24
> 37.125.129.in-addr.arpa         ZSK      active    2016-08-11 04:53:24
> 37.125.129.in-addr.arpa         ZSK      ready     2016-08-11 04:53:24
> key list completed in 0 seconds.
> #
>
> Should it worry me that all dates-times are in the past?

Not necessarily. That date of next transition is for displaying purposes
only. To be able to print something that is like ODS 1.4.

Though it is unexpected. Could you check the output of
ods-enforcer queue

It should be the time the zone is enforced again by the way. Not
specifically the key. So all having the same time is normal.

//Yuri







_______________________________________________
Opendnssec-user mailing list
Opendnssec-user at lists.opendnssec.org
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user