>> The email should have been sent at an earlier stage. Internally DS
>> records have these states:
>>
>> * unsubmitted
>> * submit
>> * submitted (waiting for ds-seen)
>> * seen
>> * retract
>> * retracted
>>
>> The transition between submit and submitted should go automatically when
>> you have a DelegationSignerSubmitCommand specified. Like you have.
>>

trying to follow/understand keystates

delete & re-add

        ods-enforcer zone delete --all
        ods-enforcer zone add -z example.info -p lab

check current time

        date
                Wed Dec 21 06:41:33 PST 2016

note the current, reported key state ... 'publish'

        ods-enforcer key list --verbose
                Keys:
                Zone:                           Keytype: State:    Date of next 
transition: Size: Algorithm: CKA_ID:                          Repository: 
KeyTag:
                example.info                    KSK      publish   2016-12-21 
06:45:01      2048  8          acec57818bc81329aff8b50d1b368c37 SoftHSM     
31180
                example.info                    ZSK      ready     2016-12-21 
06:45:01      1024  8          93d581dac130c9ff795c246698511e97 SoftHSM     4800

wait until after "Date of next transition"

        date
                Wed Dec 21 06:46:58 PST 2016

key state has NOT changed after 'next transition'; not sure what SHOULD have 
shown ...

        ods-enforcer key list --verbose
                Keys:
                Zone:                           Keytype: State:    Date of next 
transition: Size: Algorithm: CKA_ID:                          Repository: 
KeyTag:
                example.info                    KSK      publish   2016-12-21 
06:51:01      2048  8          acec57818bc81329aff8b50d1b368c37 SoftHSM     
31180
                example.info                    ZSK      ready     2016-12-21 
06:51:01      1024  8          93d581dac130c9ff795c246698511e97 SoftHSM     4800

eventually, simply waiting longer

        date
                Wed Dec 21 06:53:29 PST 2016

        ods-enforcer key list --verbose
                Keys:
                Zone:                           Keytype: State:    Date of next 
transition: Size: Algorithm: CKA_ID:                          Repository: 
KeyTag:
                example.info                    KSK      ready     waiting for 
ds-seen      2048  8          acec57818bc81329aff8b50d1b368c37 SoftHSM     31180
                example.info                    ZSK      active    2016-12-21 
10:35:01      1024  8          93d581dac130c9ff795c246698511e97 SoftHSM     4800

still no "keystate_ds_x_cmd" in logs, and no email sent
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

Reply via email to