[Opendnssec-user] ods 2.0.1 ZSK roll-over problem

[Berry A.W. van Halderen]

On 10/04/2016 11:06 AM, Fred.Zwarts wrote:
> Hi Yuri,
> 
> Is there any progress on this matter? I have a strong impression that
> the problem is not (only) caused by migration problems. It seems to
> happen always if a standby ZSK is configured.

Yuri is out of the office for today, but we have some progress as we
think we have encountered a similar issue, though not quite the same.
The issue actually hit us painfully hard as we have not installed
normal safety procedures to avoid problems :-(

> I wonder if you can reproduce this problem with standby ZSKs?

However with us there are no standby keys.  The problem we encountered
was really caused by the migration, and although we cannot map it
directly to your case, we have new leads to pursue the issue and are
following up onto it.  Probably either migration or with you another
cause causes keys to be partially seen in a inconsistent state, but
we really need a couple more days to review and replay.

\Berry