Hi Yuri,
> I'm unsure there is tooling for that. Though I would expect
>
> ods-ksmutil key ksk-retire --zone tt01 ---cka_id
> 4e7989ca670a7f421fd51d6e9373c271
>
> to have the effect you are looking for.
No, that didn't work, at least not by specifying key tag (no keys in
ACTIVE state match...). I tried all combinations that came to mind; none
worked.
-JP
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user