[Opendnssec-user] KSK Retirement log messages from ods-enforcerd

Yuri Schaeffer yuri at nlnetlabs.nl
Fri Jan 27 09:09:30 UTC 2017

Hi Marc,

> As it is not an upcoming, but a missed rollover (as the "Date of next
> transition" has long passed), shouldn't it log the
>     ods-enforcerd: WARNING: KSK Retirement reached
> message instead ??

It is not really a missed rollover. It merely hasn't happened yet. It is
waiting for user input since that time.

We could append:

Jan 26 12:18:49 ods-enforcerd: Rollover of KSK expected at 2016-07-25
10:23:48 for uutest.com, waiting for human.

Or something more formal of course. :) Would that work?


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20170127/99f31c89/attachment.bin>

More information about the Opendnssec-user mailing list