[ Quoting <[email protected]> in "[Opendnssec-user] RRSIG for hobby.n..." ] > Hi i have problem with rrsig’s that are expiring. > > In the kaspl it states that the rrsig’s must be refresh 3d before they expire. > > But opendnssec doesn’t refresh them.
isn't the jitter also in play here? I.e. In the worst case they expire 3 +12 hours day > <Refresh>P3D</Refresh> > <Jitter>PT12H</Jitter> > > But nagios reports: WARNING: check_dnssec_expiration - RRSIG for hobby.nl > expires soon (20120705141400). although this is really soon... grtz Miek
signature.asc
Description: Digital signature
_______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
