[Opendnssec-user] Upgrade to 2.1.8

Ton ton.amsterdam.nl at gmail.com
Thu Mar 18 14:14:21 UTC 2021


We did a testing upgrade from ODS 1.4.14 to 2.1.8 There has been
enough procrastination regarding this upgrade. :)

With ODS version 1.4.14:

# ods-ksmutil key list -z nltestdomain.nl -t KSK
Keys:
Zone:                           Keytype:      State:    Date of next
transition:
nltestdomain.nl                 KSK           dssub     waiting for ds-seen
nltestdomain.nl                 KSK           active    *2026-03-14*
11:58:56

After the upgrade to 2.1.8 we have:

# ods-enforcer key list -z nltestdomain.nl -t KSK
Keys:
Zone:                           Keytype: State:    Date of next transition:
nltestdomain.nl                 KSK      retire    waiting for ds-gone
nltestdomain.nl                 KSK      active    *2021-03-19* 12:33:43

The date of the next transition for the ACTIVE key becomes 24 hours later.
While it was in 2026 before the migration.
Is that normal or something to worry about?

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20210318/6b71e502/attachment.htm>


More information about the Opendnssec-user mailing list