[Opendnssec-user] OpenDNSSEC with SafeNet Luna HSM

[(Berry) A.W. van Halderen]

On Tue, May 17, 2016 at 09:51:16AM +0200, Yuri Schaeffer wrote:
> Hi Roman,
> 
> OpenDNSSEC will do that. In the KASP you can define a purge delay in the
> <Key> section. I believe of you set it to 0 it will never purge.

You can (also) omit the <Purge> item, which means not to purge (unless
you explicitly do so).

> From the example kasp.xml, purge 14 days after rollover finished:
> 
> <Purge>P14D</Purge>

\Berry
-- 
N: (Berry) A.W. van Halderen
E: berry at nlnetlabs.nl
O: NLnet Labs
W: http://www.nlnetlabs.nl/