[Opendnssec-user] manual key rollover results in "1970-01-01 01:00:00"

Yuri Schaeffer yuri at nlnetlabs.nl
Mon Nov 13 14:03:59 UTC 2017

> and there seems to be something in the queue:
> root at traxotic [/var/lib/opendnssec/signconf]$ ods-enforcer queue
> There is 1 task scheduled.
> It is now Mon Nov 13 14:15:36 2017 (1510578936 seconds since epoch)
> Next task scheduled Mon Nov 13 14:16:06 2017 (1510578966 seconds since epoch)
> On Mon Nov 13 14:16:06 2017 I will [enforce] next zone
> queue completed in 0 seconds.

Based on this I believe you are still running a 2.0/2.1 hybrid. If you
where really on 2.1.3 I would expect the output:

"On Mon Nov 13 14:16:06 2017 I will enforce zone dennisbaaten.com"

> However;
> The DB 2006 error in syslog persists. Not sure if this is causing troubles at this moment.

Yes this is absolutely critical. You must sort out your database issues
first. Without proper access to the database the Enforcer won't work

> My initial guess is that tomorrow at the "Date of next transition" the rollovers will actually take place. If not, I will report back to the mailinglist.

Please very all your packages and binaries running are of the correct
and same version. Also make sure the enforcer has rights to update the
database. Check the timeout settings of your database  /etc/mysql/my.cnf


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20171113/2635814e/attachment.bin>

More information about the Opendnssec-user mailing list