Thanks for your feedback.

> On 12. Feb 2024, at 08:40, Daniel Salzman <daniel.salz...@nic.cz> wrote:
> 
> Hi,
> 
> the zone re-sign event covers all DNSSEC-related actions (key rollover, RRSIG 
> updates, NSEC3 updates,...).
> I don't think it's important to understand what will happen during the next 
> re-sign.
> 
> ksk-lifetime - A period between KSK generation and the next rollover 
> initiation.
> zsk-lifetime - A period between ZSK activation and the next rollover 
> initiation.
> 
> in combination with `keymgr ellael.org. list` gives the answer.
> 
> However, since version 3.3.5 Knot will log the next key step.

That's good news.

Regards,
Michael
--

Reply via email to