[Opendnssec-user] sign failure
Randy Bush
randy at psg.com
Fri Oct 23 22:06:32 UTC 2020
> these, and 42 like them, work
>
> <Zone name="28.147.in-addr.arpa"> <Policy>default</Policy>
> <SignerConfiguration>/usr/local/var/opendnssec/signconf/147.028.xml</SignerConfiguration>
> <Adapters>
> <Input> <File>/usr/local/var/opendnssec/unsigned/147.028</File> </Input>
> <Output> <File>/usr/home/dns/primary/147.028</File> </Output>
> </Adapters>
> </Zone>
>
> this does not
>
> <Zone name="0.28.147.in-addr.arpa"> <Policy>default</Policy>
> <SignerConfiguration>/usr/local/var/opendnssec/signconf/147.028.000.xml</SignerConfiguration>
> <Adapters>
> <Input> <File>/usr/local/var/opendnssec/unsigned/147.028.000</File> </Input>
> <Output> <File>/usr/home/dns/primary/147.028.000</File> </Output>
> </Adapters>
> </Zone>
and
# ods-enforcer key list | grep 147
28.147.in-addr.arpa KSK active 2020-12-30 21:37:26
28.147.in-addr.arpa ZSK active 2020-12-30 21:37:26
147.028.000 KSK ready waiting for ds-seen
147.028.000 ZSK active 2021-01-20 16:14:23
147.028.001 KSK ready waiting for ds-seen
147.028.001 ZSK active 2021-01-20 16:14:41
147.028.002 KSK ready waiting for ds-seen
147.028.002 ZSK active 2021-01-20 16:15:44
...
so it is name confusion. i just do not know what i am supposed to do
to unconfuse it.
randy
More information about the Opendnssec-user
mailing list