[Opendnssec-user] What's difference between usage of ODS2x DelegationSignerSubmitCommand & DelegationSignerRetractCommand ?

PGNet Dev pgnet.dev at gmail.com
Sun Feb 19 16:47:16 UTC 2017


The ODS 2x docs @

	https://wiki.opendnssec.org/display/DOCS20/conf.xml#conf.xml-DelegationSignerSubmitCommandandDelegationSignerRetractCommand

state for both of these commands the exact same functional decscription,

	"<DelegationSignerSubmitCommand> Configure the 
<DelegationSignerSubmitCommand> if you want to have a program/script 
receiving the new KSK during a key rollover.

and

	<DelegationSignerRetractCommand> Configure the 
<DelegationSignerRetractCommand> if you want to have a program/script 
receiving the new KSK during a key rollover."

and provide NO further clarification of the differences in usage & 
timing of these commands.

What are the trigger conditions / different usage for

	<DelegationSignerRetractCommand>

vs

	<DelegationSignerRetractCommand>

?

Are they both triggered automatically based on internal key state?
Which, specifically?  And what's relative timing?

Or do they fire only on a manually executed cmd line trigger?






More information about the Opendnssec-user mailing list