> Another question regarding the problems that ldns caused for OpenDNSSEC, > is it possible to clear/change OpenDNSSECs internal SOA serial ? > > I noticed that some zones have gotten "interesting" serials as side-effect of > what happened:
That is another code and is not affected by the ldns bug. > Jan 4 19:11:35 hidden-master ods-auditor[6296]: SOA differs : from > 2012010401 to 2065302802 > > The configuration says it should be type "datecounter", but it doesn't look > like a ordinary date any more... A real date can only be set if the current or inbound serial is lower then the current date. If that is not the case, than it will just increase the previous value with one. Have you ever had an inbound serial with a high value? To fix this, you can wrap the serial number in the unsigned zone: http://www.zytrax.com/books/dns/ch9/serial.html // Rickard _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
