>> - I was able to create such a mess in the keys for udp53.cz, that I
>> had to disable auditor :)
> 
> We should have a look on this.


Sorry - I forgot to say that I have been in contact with Ondrej off-list. 
Unfortunately, the original signed file has been lost, so it is impossible to 
be certain about the effect, let alone the cause. However, we suspect that the 
system may have become so deeply confused (we really need to work on deleting 
and re-adding zones, which currently has some issues), that the signer may not 
have done The Right Thing.

HTH


Alex._______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

Reply via email to