On 22/07/14 15:54, Jens Link wrote: > Hi, > > maybe I'm missing something in the documentation but is there a (good) > way to speed up the transition of a key from publish to active? > > kind regards, > > Jens
Assuming that the configuration you have is realistic then the answer may be no... This transition relies on: The TTL (of the ZSK DNSKEY record or the DS in the parent for the KSK), The propagation delay, and The publish safety margin. Of these values only the first is deterministic, the second is a best guess and the final value is to cover any contingencies. One question though is why you want to do this? If you are testing then these values can be set very low; if you are live then I'd _strongly_ recommend against doing that or you may well start using keys before they are ready. Sion _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
