[Opendnssec-user] OpenDNSSEC with SafeNet Luna HSM

(Berry) A.W. van Halderen berry at nlnetlabs.nl
Tue May 17 08:53:00 UTC 2016

On Tue, May 17, 2016 at 09:51:16AM +0200, Yuri Schaeffer wrote:
> Hi Roman,
> OpenDNSSEC will do that. In the KASP you can define a purge delay in the
> <Key> section. I believe of you set it to 0 it will never purge.

You can (also) omit the <Purge> item, which means not to purge (unless
you explicitly do so).

> From the example kasp.xml, purge 14 days after rollover finished:
> <Purge>P14D</Purge>

N: (Berry) A.W. van Halderen
E: berry at nlnetlabs.nl
O: NLnet Labs
W: http://www.nlnetlabs.nl/

More information about the Opendnssec-user mailing list