[Opendnssec-user] sign failure

Randy Bush randy at psg.com
Fri Oct 23 22:06:32 UTC 2020


> these, and 42 like them, work
> 
>   <Zone name="28.147.in-addr.arpa">  <Policy>default</Policy>
>     <SignerConfiguration>/usr/local/var/opendnssec/signconf/147.028.xml</SignerConfiguration>
>     <Adapters>
>       <Input> <File>/usr/local/var/opendnssec/unsigned/147.028</File> </Input>
>       <Output> <File>/usr/home/dns/primary/147.028</File> </Output>
>       </Adapters>
>     </Zone>
> 
> this does not
> 
>   <Zone name="0.28.147.in-addr.arpa">  <Policy>default</Policy>
>     <SignerConfiguration>/usr/local/var/opendnssec/signconf/147.028.000.xml</SignerConfiguration>
>     <Adapters>
>       <Input> <File>/usr/local/var/opendnssec/unsigned/147.028.000</File> </Input>
>       <Output> <File>/usr/home/dns/primary/147.028.000</File> </Output>
>       </Adapters>
>     </Zone>

and

# ods-enforcer key list | grep 147
28.147.in-addr.arpa             KSK      active    2020-12-30 21:37:26
28.147.in-addr.arpa             ZSK      active    2020-12-30 21:37:26
147.028.000                     KSK      ready     waiting for ds-seen
147.028.000                     ZSK      active    2021-01-20 16:14:23
147.028.001                     KSK      ready     waiting for ds-seen
147.028.001                     ZSK      active    2021-01-20 16:14:41
147.028.002                     KSK      ready     waiting for ds-seen
147.028.002                     ZSK      active    2021-01-20 16:15:44
...

so it is name confusion.  i just do not know what i am supposed to do
to unconfuse it.

randy


More information about the Opendnssec-user mailing list