Hello list!
I have a problem with opendnssec after upgrade to 1.3.6 on Debian
Wheezy. For testing purposes, after upgrade, i've started with
"ods-ksmutil setup" command to start with clean configuration.
The problem is with the ods-signer:
Mar 9 19:36:55 dns-hidden ods-signerd: [rrset] skipping key
1bae67eab87b8d20540a87b047f5eac6 for signing RRset[1]: no active ZSK
Mar 9 19:36:55 dns-hidden ods-signerd: [rrset] skipping key
4641f3444cdcf5ef6b8499c7e6699780 for signing: RRset[1] already has
signature with same algorithm
but:
root@dns-hidden:/etc/bind/zones# ods-ksmutil key list
Keys:
Zone: Keytype: State: Date of next
transition:
xxx.com ZSK active 2012-04-07
09:14:40
xxx.com KSK active 2013-03-09 10:11:04
root@dns-hidden:/etc/bind/zones# ods-hsmutil list
Listing keys in all repositories.
2 keys found.
Repository ID Type
---------- -- ----
SoftHSM 1bae67eab87b8d20540a87b047f5eac6 RSA/2048
SoftHSM 4641f3444cdcf5ef6b8499c7e6699780 RSA/2048
Btw. my zone is not signed. Any idea?
Best Regards
Jan
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
