On 01/13/2011 03:08 PM, Rickard Bellgrim wrote: > > On 13 jan 2011, at 13.41, Gilles Massen wrote: > >> Why is the SOA ttl considered for the check? DNSKEY TTL I'd understand, >> but SOA? > > Yes, that sounds strange. The first ZSK should be pre-published according to > this time: > Ipub = Dprp + min(TTLsoa, SOAmin) > > The following ZSK:s should be pre-published using this time: > Ipub = Dprp + TTLkey
Ok, that's what I thought, thanks for confirming. >> As a certainly unwanted sideeffect, the auditor (or the calling process) >> didn't like that situation at all, as the auditor started to go over the >> affected zones over and over again (restarting immediately after each run). > > The signer have a back off mechanism for doing re-tries. 1 minute, 2 minutes, > 4 minutes.... After looking again at the timestamps, this is indeed what happened. Best, Gilles -- Fondation RESTENA - DNS-LU 6, rue Coudenhove-Kalergi L-1359 Luxembourg tel: (+352) 424409 fax: (+352) 422473 _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
