[Opendnssec-user] ods 2.0.1 ZSK roll-over problem

[Yuri Schaeffer]

> I forced another ZSK roll-over on our test system and the same problem
> popped up.
> There are now two retiring ZSKs and one ready ZSK, but no active ZSK.
> In the zone file, many records are still signed with the retiring ZSK.
> However, this ZSK itself is no longer in the signed zone file.

To debug this I could really use your database or at the very least the
output of
	ods-enforcer key list -d

//Yuri

> Could it be that the option <Standby>1</Standby> causes these problems?

unlikely.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: OpenPGP digital signature
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20160922/0130c5e7/attachment.bin>