Re: Struggling with dnssec-policy timers

2022-11-28 Thread Matthijs Mekking
On 29-11-2022 00:39, vom513 wrote: On Nov 28, 2022, at 3:12 PM, vom513 wrote: Thanks for the reply and info… I would have thought the CDS would be published before the key went active. I.e. there would be a period of TWO DS’es at the parent (I’m assuming the parent supports CDS/CDNSKEY

Re: Struggling with dnssec-policy timers

2022-11-28 Thread vom513
> On Nov 28, 2022, at 3:12 PM, vom513 wrote: > > Thanks for the reply and info… > > I would have thought the CDS would be published before the key went active. > I.e. there would be a period of TWO DS’es at the parent (I’m assuming the > parent supports CDS/CDNSKEY which mine (registrar)

Re: Struggling with dnssec-policy timers

2022-11-28 Thread vom513
Thanks for the reply and info… I would have thought the CDS would be published before the key went active. I.e. there would be a period of TWO DS’es at the parent (I’m assuming the parent supports CDS/CDNSKEY which mine (registrar) does). Since the new key goes active, CDS is published, and

Re: Struggling with dnssec-policy timers

2022-11-28 Thread Matthijs Mekking
Hi, On 27-11-2022 23:32, vom513 wrote: Hello all, I’m still having a really hard time understanding and getting my timings right. At least I think I am (from the way I’m reading the status/logs/state files). I let my current CSK get completely “omnipresent” for all it’s timers (I’m not even

Struggling with dnssec-policy timers

2022-11-27 Thread vom513
Hello all, I’m still having a really hard time understanding and getting my timings right. At least I think I am (from the way I’m reading the status/logs/state files). I let my current CSK get completely “omnipresent” for all it’s timers (I’m not even sure if this is really necessary…) I