Activation/inactivation is when named starts/stops signing with the key. Inception/expiratioin is the time perion for which the signature is valid.
These are different time periods and are basically unrelated. The inception will be < inactivation. The expiratin will be > activation. After a key is activated it will be used to sign records that change. The sig-validity-interval (less a small random factor) is used to determine for how long a signature is valid for. Mark In message <14b292cc598.2743.14d9188d684ea7b6d1324cf92af46...@klam.ca>, John writes: > oops!! I swapped the ZSK and KSK in the table. > > > On January 26, 2015 9:09:40 PM John <j...@klam.ca> wrote: > > > my experimental zone (the family site) klam.ca has a KSK and a ZSK. > > There appear to be time differences between the records reported by DIG > > and the source records on file. > > In the case of the ZSK the inactive date-time is a few hours different, > > but in the ZSKs case it is 3 months. > > > > Is this a problem, and if so what do I do about it. > > > > The following dates were found in the source record and the output from dig. > > > > source record dig > > KSK -A > > 20150126163534 20150117012252 > > KSK -I > > 20150225173534 > > 20150225144654 > > > > > > > > ZSK -A > > 20150126163534 > > 20150126173534 > > ZSK -I > > 20150527015028 > > 20150225173534 > > > > > > > > -- > > John Allen > > KLaM > > ------------------------------------------ > > If you are out to describe the truth, leave elegance to the tailor. > > > > > > > > ---------- > > _______________________________________________ > > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > > unsubscribe from this list > > > > bind-users mailing list > > bind-users@lists.isc.org > > https://lists.isc.org/mailman/listinfo/bind-users > > ------------14b292ccdd3902274342ea2c58 > Content-Type: text/html; charset="UTF-8" > Content-Transfer-Encoding: 8bit > > <html> > <head> > > > </head> > <body> > <div style="color: black;"> > <div style="color: black;"> > <p style="margin: 0 0 1em 0; color: black;">oops!! I swapped the ZSK and > KSK in the table.</p> > </div> > <div style="color: black;"> > <p > style="color: black; font-size: 10pt; font-family: Arial, sans-serif; margin: > 10pt 0;">On > January 26, 2015 9:09:40 PM John <j...@klam.ca> wrote:</p> > <blockquote type="cite" class="gmail_quote" > style="margin: 0 0 0 0.75ex; border-left: 1px solid #808080; padding-left: > 0.75ex;"> > <div class="moz-signature">my experimental zone (the family site) > klam.ca has a KSK and a ZSK. <br> > There appear to be time differences between the records reported > by DIG and the source records on file. <br> > In the case of the ZSK the inactive date-time is a few hours > different, but in the ZSKs case it is 3 months.<br> > <br> > Is this a problem, and if so what do I do about it.<br> > <br> > The following dates were found in the source record and the output > from dig.<br> > <table border="1" cellpadding="2" cellspacing="2" width="100%"> > <tbody> > <tr> > <td valign="top"><br> > </td> > <td align="center" valign="top">source record </td> > <td align="center" valign="top">dig<br> > </td> > </tr> > <tr> > <td valign="top">KSK -A <br> > </td> > <td align="center" valign="top">20150126163534 </td> > <td align="center" valign="top">20150117012252<br> > </td> > </tr> > <tr> > <td valign="top">KSK -I<br> > </td> > <td align="center" valign="top">20150225173534<br> > </td> > <td align="center" valign="top">20150225144654<br> > </td> > </tr> > <tr> > <td valign="top"><br> > </td> > <td valign="top"><br> > </td> > <td valign="top"><br> > </td> > </tr> > <tr> > <td valign="top">ZSK -A<br> > </td> > <td align="center" valign="top">20150126163534<br> > </td> > <td align="center" valign="top">20150126173534</td> > </tr> > <tr> > <td valign="top">ZSK -I<br> > </td> > <td align="center" valign="top">20150527015028<br> > </td> > <td align="center" valign="top">20150225173534<br> > </td> > </tr> > </tbody> > </table> > <br> > Â <br> > -- <br> > John Allen<br> > KLaM<br> > ------------------------------------------<br> > If you are out to describe the truth, leave elegance to the > tailor. > </div> > > _______________________________________________<br> > Please visit <a class="aqm-autolink aqm-autowrap" > href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> > to unsubscribe from this list<br> > <br> > bind-users mailing list<br> > bind-users@lists.isc.org<br> > <a class="aqm-autolink aqm-autowrap" > href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a><br></blockquote> > </div> > </div> > </body> > </html> > > ------------14b292ccdd3902274342ea2c58-- > > > --===============0592810492330139115== > Content-Type: text/plain; charset="us-ascii" > MIME-Version: 1.0 > Content-Transfer-Encoding: 7bit > Content-Disposition: inline > > _______________________________________________ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > --===============0592810492330139115==-- > -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users