[Opendnssec-user] Removing old keys and policies

Julian Brost julian at 0x4a42.net
Tue Aug 22 13:27:23 UTC 2017


Hi,

(follow-up on the public list, could also be of interest to others)

On 21.08.2017 13:59, Hoda Rohani wrote:
> Actually this command works for me on your db:
>
> ods-enforcer policy purge
> Purging policies
> [...]

Yes, that command indeed works. Somehow I must have missed that command.

> Please let me know if you still have problem.

The table hsmKey still contains lots of keys that now no longer
reference a policy and neither exist in SoftHSM any more. Is that
supposed to happen?

Thanks for your help!

Regards,
Julian



More information about the Opendnssec-user mailing list