-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Volker,
It would help if you could send the signer configuration and the files in the /var/opendnssec/tmp directory (possibly off-list), to see which module of openDNSSEC we have to track this. Best regards, Matthijs On 08/02/2011 05:45 PM, Volker Janzen wrote: > Hi all, > > today I noticed a problem in my OpenDNSSEC installation, which I don't > understand. I had expired signatures for many domains in OpenDNSSEC. I > was not able to figure out what might have caused this. I just found > this strange log entries, which I do not understand: > > ods-auditor[7879]: Auditor started > ods-auditor[7879]: Auditor starting on <domain1>.de > ods-auditor[7882]: Auditor started > ods-auditor[7882]: Auditor starting on <domain2>.de > ods-auditor[7879]: SOA differs : from 2011080103 to 2011062380 > ods-auditor[7879]: Auditing <domain1>.de zone : NSEC3 SIGNED > ods-auditor[7879]: Key (20188) has gone straight to active use without a > prepublished phase > ods-auditor[7879]: Finished auditing <domain1>.de zone > ods-auditor[7882]: SOA differs : from 2011080103 to 2011062378 > ods-auditor[7882]: Auditing <domain2>.de zone : NSEC3 SIGNED > ods-auditor[7882]: Key (40336) has gone straight to active use without a > prepublished phase > ods-auditor[7882]: Finished auditing <domain2>.de zone > > What might have cause this problem and how can I solve it now? The > signatures are expired and I can't see any attempt of the signer to > re-sign the zones. > > > Kind regards > Volker Janzen > > _______________________________________________ > Opendnssec-user mailing list > [email protected] > https://lists.opendnssec.org/mailman/listinfo/opendnssec-user -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJOOP5lAAoJEA8yVCPsQCW5dmwH/izE6HQV3DIDLLMvPV46uyMg tDHqRjuKr8A1UCVOXguXtLU0UJxvkmhQIRAJe6ChAGeESe51xspxXPf/+RUTuHa9 0UoEkaZAmE+3ZDbQbDNOd3eTYt8T9ilvYD5bYVpIMvxGEwGPrgAvqMeZ4DXNX1rO Sg7Dp9tnVEPBqrrNyCOX9bvBDcxJJgecTQ/e5C+pQheoz64nTL0f2KUvVQ1taPQ5 5do2XgYHjpXkAAthfXlHD0d0EevGzofCh4KF4TizkQaopQWcf6h84vtcIIrh79St 8xNxcHiD7nMIiBBygz/YN+zbPxqixXVTGe8986L/0eo//lvHXRTip1H3oXMGxTw= =Nk0V -----END PGP SIGNATURE----- _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
