>> The email should have been sent at an earlier stage. Internally DS
>> records have these states:
>>
>> * unsubmitted
>> * submit
>> * submitted (waiting for ds-seen)
>> * seen
>> * retract
>> * retracted
>>
>> The transition between submit and submitted should go automatically when
>> you have a DelegationSignerSubmitCommand specified. Like you have.
>>
trying to follow/understand keystates
delete & re-add
ods-enforcer zone delete --all
ods-enforcer zone add -z example.info -p lab
check current time
date
Wed Dec 21 06:41:33 PST 2016
note the current, reported key state ... 'publish'
ods-enforcer key list --verbose
Keys:
Zone: Keytype: State: Date of next
transition: Size: Algorithm: CKA_ID: Repository:
KeyTag:
example.info KSK publish 2016-12-21
06:45:01 2048 8 acec57818bc81329aff8b50d1b368c37 SoftHSM
31180
example.info ZSK ready 2016-12-21
06:45:01 1024 8 93d581dac130c9ff795c246698511e97 SoftHSM 4800
wait until after "Date of next transition"
date
Wed Dec 21 06:46:58 PST 2016
key state has NOT changed after 'next transition'; not sure what SHOULD have
shown ...
ods-enforcer key list --verbose
Keys:
Zone: Keytype: State: Date of next
transition: Size: Algorithm: CKA_ID: Repository:
KeyTag:
example.info KSK publish 2016-12-21
06:51:01 2048 8 acec57818bc81329aff8b50d1b368c37 SoftHSM
31180
example.info ZSK ready 2016-12-21
06:51:01 1024 8 93d581dac130c9ff795c246698511e97 SoftHSM 4800
eventually, simply waiting longer
date
Wed Dec 21 06:53:29 PST 2016
ods-enforcer key list --verbose
Keys:
Zone: Keytype: State: Date of next
transition: Size: Algorithm: CKA_ID: Repository:
KeyTag:
example.info KSK ready waiting for
ds-seen 2048 8 acec57818bc81329aff8b50d1b368c37 SoftHSM 31180
example.info ZSK active 2016-12-21
10:35:01 1024 8 93d581dac130c9ff795c246698511e97 SoftHSM 4800
still no "keystate_ds_x_cmd" in logs, and no email sent
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user