[Opendnssec-user] resign interval

Iván García ivan.garcia at gmail.com
Fri Jan 12 09:32:25 UTC 2018


Thanks Yuri :)

I received any errors in nsec3 records... and i think that is because
Resign ( and Jitter too.. ) values are greater than Signer Engine.


Thanks!
Iván.

2018-01-12 9:44 GMT+01:00 Yuri Schaeffer <yuri at nlnetlabs.nl>:

> Hi Ivan,
>
> >   * <Resign> is the re-sign interval, which is the interval between runs
> >     of the Signer Engine
>
> > Should be the same as the Signer Engine? For example if i have a job
> > that is signing the zone every 3 hour... Resign should be 3H?
>
> Yes. The enforcer uses this value to compute how long it takes to sign
> all records with a new key. It should be the same as the resign interval
> of your signer.
>
> //Yuri
>
>
> _______________________________________________
> Opendnssec-user mailing list
> Opendnssec-user at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20180112/696b67e2/attachment.htm>


More information about the Opendnssec-user mailing list