[Opendnssec-user] Date of next transition in the past.

[Fred.Zwarts]

Bij stopping en starting ods, the dates shown are now in the future:

# ods-enforcer key list --zone 37.125.129.in-addr.arpa
Keys:
Zone:                           Keytype: State:    Date of next transition:
37.125.129.in-addr.arpa         KSK      retire    2016-08-13 14:33:34
37.125.129.in-addr.arpa         KSK      active    2016-08-13 14:33:34
37.125.129.in-addr.arpa         ZSK      retire    2016-08-13 14:33:34
37.125.129.in-addr.arpa         ZSK      active    2016-08-13 14:33:34
37.125.129.in-addr.arpa         ZSK      ready     2016-08-13 14:33:34
key list completed in 0 seconds.
# ods-enforcer queue
There are 2 tasks scheduled.
It is now Fri Aug 12 09:31:01 2016 (1470987061 seconds since epoch)
Next task scheduled Fri Aug 12 16:33:10 2016 (1471012390 seconds since 
epoch)
On Fri Aug 12 16:33:10 2016 I will [enforce] KVI.nl
On Fri Nov 18 11:10:04 2016 I will [resalt] policies
queue completed in 0 seconds.
#

This suggests that the dates are only updated at startup.

Fred.Zwarts.

"Yuri Schaeffer"  schreef in bericht 
news:fa5bd541-5887-e339-3932-61dfc6b50bbe at nlnetlabs.nl...

> Today I noticed something else on our test system with ods 2.0.1:
>
> # date
> Thu Aug 11 15:48:31 CEST 2016
> # ods-enforcer key list --zone 37.125.129.in-addr.arpa
> Keys:
> Zone:                           Keytype: State:    Date of next 
> transition:
> 37.125.129.in-addr.arpa         KSK      retire    2016-08-11 04:53:24
> 37.125.129.in-addr.arpa         KSK      active    2016-08-11 04:53:24
> 37.125.129.in-addr.arpa         ZSK      retire    2016-08-11 04:53:24
> 37.125.129.in-addr.arpa         ZSK      active    2016-08-11 04:53:24
> 37.125.129.in-addr.arpa         ZSK      ready     2016-08-11 04:53:24
> key list completed in 0 seconds.
> #
>
> Should it worry me that all dates-times are in the past?

Not necessarily. That date of next transition is for displaying purposes
only. To be able to print something that is like ODS 1.4.

Though it is unexpected. Could you check the output of
ods-enforcer queue

It should be the time the zone is enforced again by the way. Not
specifically the key. So all having the same time is normal.

//Yuri







_______________________________________________
Opendnssec-user mailing list
Opendnssec-user at lists.opendnssec.org
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user