hi,

If there are currently no keys that we have to check the DS for, then you may 
still see this log line.

all my zones have now toggled rumoured -> omnipresent.  i took no explicit 
manual action other than letting an arbitrarily long-ish time pass.
it just happened ... eventually.

re: your comment "we have to check the DS for", what exec _forces_ a (re)check 
of keys' DS ?

i'd understood

  rndc dnssec -checkds published ${zone}

to do exactly that.  i.e., check 'NOW'.
and, since the DS were clearly published and available @ my each/all of my 
parental-agents{}, that the state toggle would happen, similarly, 'NOW'. or at 
least NOW-ish.

is that incorrect?
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to