On Tue, 17 Jul 2012, Matthijs Mekking wrote:
It's somewhat misleading, as I think all RRSIG generation failed,
and the message 81 out of 1910549 failed wrongly suggests some
RRSIGs were correctly generated.
I guess 81 signatures could be reused and no HSM interaction was
required.
You're missing the point. The zone never has or needs more then 81
signatures because it is signed with opt-in. We don't need 2M RRSIGs.
Paul
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
