Rickard Bellgrim <[email protected]> wrote: > The KSK will not become active until you have uploaded the DS RR and > said ds-seen to the Enforcer. The first time you sign the zone, the > KSK will sign the DNSKEY RRset.
This is obvious to me but why the KSK is in publish state? ods-ksmutil key list Keys: Zone: Keytype: State: Date of next transition: xxx.com ZSK active 2012-03-28 11:52:15 xxx.com KSK publish 2012-02-28 01:52:15 Best Regards, Jan _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
