[Opendnssec-user] termination of obs2 DelegationSignerSubmitCommand input stream missing?
PGNet Dev
pgnet.dev at gmail.com
Wed Dec 21 14:57:51 UTC 2016
>> The email should have been sent at an earlier stage. Internally DS
>> records have these states:
>>
>> * unsubmitted
>> * submit
>> * submitted (waiting for ds-seen)
>> * seen
>> * retract
>> * retracted
>>
>> The transition between submit and submitted should go automatically when
>> you have a DelegationSignerSubmitCommand specified. Like you have.
>>
trying to follow/understand keystates
delete & re-add
ods-enforcer zone delete --all
ods-enforcer zone add -z example.info -p lab
check current time
date
Wed Dec 21 06:41:33 PST 2016
note the current, reported key state ... 'publish'
ods-enforcer key list --verbose
Keys:
Zone: Keytype: State: Date of next transition: Size: Algorithm: CKA_ID: Repository: KeyTag:
example.info KSK publish 2016-12-21 06:45:01 2048 8 acec57818bc81329aff8b50d1b368c37 SoftHSM 31180
example.info ZSK ready 2016-12-21 06:45:01 1024 8 93d581dac130c9ff795c246698511e97 SoftHSM 4800
wait until after "Date of next transition"
date
Wed Dec 21 06:46:58 PST 2016
key state has NOT changed after 'next transition'; not sure what SHOULD have shown ...
ods-enforcer key list --verbose
Keys:
Zone: Keytype: State: Date of next transition: Size: Algorithm: CKA_ID: Repository: KeyTag:
example.info KSK publish 2016-12-21 06:51:01 2048 8 acec57818bc81329aff8b50d1b368c37 SoftHSM 31180
example.info ZSK ready 2016-12-21 06:51:01 1024 8 93d581dac130c9ff795c246698511e97 SoftHSM 4800
eventually, simply waiting longer
date
Wed Dec 21 06:53:29 PST 2016
ods-enforcer key list --verbose
Keys:
Zone: Keytype: State: Date of next transition: Size: Algorithm: CKA_ID: Repository: KeyTag:
example.info KSK ready waiting for ds-seen 2048 8 acec57818bc81329aff8b50d1b368c37 SoftHSM 31180
example.info ZSK active 2016-12-21 10:35:01 1024 8 93d581dac130c9ff795c246698511e97 SoftHSM 4800
still no "keystate_ds_x_cmd" in logs, and no email sent
More information about the Opendnssec-user
mailing list