Good day, This is a test we run in our testing environment, which uses Manual Rollovers and Key Generation.
We had a zone called 'example.com' using a policy called 'default'. Main facts about this policy: KSK, 1024-bits key, 5D lifetime ZSK, 1024-bits key, 2D lifetime On Jan 12 we changed the policy to 'test-pol1', which has the same definition for ZSK and KSK as 'default'. The change was executed by editing the zonelist.xml file, replacing the policy name and then call 'ods-ksmutil update zonelist' Starting from that point, KSK rollover continued to work properly but ZSK rollovers stop working. You will find attached the history of KSK and ZSK for the zone. A 'ods-ksmutil rollover list' shows /usr/local/opendnssec/bin/ods-ksmutil rollover list --zone example.com Date: Thu Jan 20 10:34:58 2011 SQLite database set to: /var/opendnssec/kasp.db Rollovers: Zone: Keytype: Rollover expected: example.com ZSK 2011-01-13 17:28:22 example.com KSK 2011-01-22 13:14:46 We have tried the rollover manually many times, but no error message (or rollover) is produced. Back to the original subject: This test should work or not? Is OpenDNSSEC prepared for a policy change for a zone? Cheers, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535
Date 31479 3183 23295 17023 27145 Tue Jan 11 10:13:41 2011 keypublis publish active dssub Tue Jan 11 10:20:01 2011 keypublis publish active dssub Tue Jan 11 11:20:01 2011 active ready retire dssub Tue Jan 11 12:20:01 2011 active ready retire dssub Tue Jan 11 13:20:01 2011 active ready retire dssub Tue Jan 11 14:20:02 2011 active ready retire dssub Tue Jan 11 15:20:01 2011 active ready dssub Tue Jan 11 16:20:01 2011 active ready dssub Tue Jan 11 17:20:01 2011 active ready dssub Tue Jan 11 18:20:01 2011 active ready dssub Tue Jan 11 19:20:01 2011 active ready dssub Tue Jan 11 20:20:01 2011 active ready dssub Tue Jan 11 21:20:02 2011 active ready dssub Tue Jan 11 22:20:01 2011 active ready dssub Tue Jan 11 23:20:01 2011 active ready dssub Wed Jan 12 00:20:02 2011 active ready dssub Wed Jan 12 01:20:01 2011 active ready dssub Wed Jan 12 02:20:01 2011 active ready dssub Wed Jan 12 03:20:02 2011 active ready dssub Wed Jan 12 04:20:01 2011 active ready dssub Wed Jan 12 05:20:02 2011 active ready dssub Wed Jan 12 06:20:01 2011 active ready dssub Wed Jan 12 07:20:01 2011 active ready dssub Wed Jan 12 08:20:01 2011 active ready dssub Wed Jan 12 09:20:01 2011 active ready dssub Wed Jan 12 10:20:01 2011 active ready dssub Wed Jan 12 11:20:01 2011 active ready dssub Wed Jan 12 12:20:01 2011 active ready dssub Wed Jan 12 13:20:01 2011 retire active dspublish Wed Jan 12 14:20:01 2011 retire active dsready Wed Jan 12 15:20:01 2011 active dsready Wed Jan 12 16:20:02 2011 active dsready Wed Jan 12 17:20:02 2011 active dsready Wed Jan 12 18:20:01 2011 active dsready Wed Jan 12 19:20:01 2011 active dsready Wed Jan 12 20:20:01 2011 active dsready Wed Jan 12 21:20:01 2011 active dsready Wed Jan 12 22:20:02 2011 active dsready Wed Jan 12 23:20:02 2011 active dsready Thu Jan 13 00:20:01 2011 active dsready Thu Jan 13 01:20:01 2011 active dsready Thu Jan 13 02:20:01 2011 active dsready Thu Jan 13 03:20:01 2011 active dsready Thu Jan 13 04:20:01 2011 active dsready Thu Jan 13 05:20:01 2011 active dsready Thu Jan 13 06:20:02 2011 active dsready Thu Jan 13 07:20:02 2011 active dsready Thu Jan 13 08:20:01 2011 active dsready Thu Jan 13 09:20:01 2011 active dsready Thu Jan 13 10:20:01 2011 active dsready Thu Jan 13 11:20:01 2011 active dsready Thu Jan 13 12:20:02 2011 active dsready Thu Jan 13 13:20:01 2011 active dsready Thu Jan 13 14:20:02 2011 active dsready Thu Jan 13 15:20:02 2011 active dsready Thu Jan 13 16:20:01 2011 active dsready Thu Jan 13 17:20:02 2011 active dsready Thu Jan 13 18:20:01 2011 active dsready Thu Jan 13 19:20:01 2011 active dsready Thu Jan 13 20:20:01 2011 active dsready Thu Jan 13 21:20:01 2011 active dsready Thu Jan 13 22:20:02 2011 active dsready Thu Jan 13 23:20:01 2011 active dsready Fri Jan 14 00:20:01 2011 active dsready Fri Jan 14 01:20:01 2011 active dsready Fri Jan 14 02:20:02 2011 active dsready Fri Jan 14 03:20:02 2011 active dsready Fri Jan 14 04:20:01 2011 active dsready Fri Jan 14 05:20:01 2011 active dsready Fri Jan 14 06:20:01 2011 active dsready Fri Jan 14 07:20:01 2011 active dsready Fri Jan 14 08:20:01 2011 active dsready Fri Jan 14 09:20:01 2011 active dsready Fri Jan 14 10:20:02 2011 active dsready Fri Jan 14 11:20:01 2011 active dsready Fri Jan 14 12:20:01 2011 active dsready Fri Jan 14 13:20:01 2011 active dsready Fri Jan 14 14:20:02 2011 active dsready Fri Jan 14 15:20:01 2011 active dsready Fri Jan 14 16:20:01 2011 active dsready Fri Jan 14 17:20:01 2011 active dsready Fri Jan 14 18:20:01 2011 active dsready Fri Jan 14 19:20:02 2011 active dsready Fri Jan 14 20:20:01 2011 active dsready Fri Jan 14 21:20:01 2011 active dsready Fri Jan 14 22:20:01 2011 active dsready Fri Jan 14 23:20:01 2011 active dsready Sat Jan 15 00:20:01 2011 active dsready Sat Jan 15 01:20:01 2011 active dsready Sat Jan 15 02:20:01 2011 active dsready Sat Jan 15 03:20:01 2011 active dsready Sat Jan 15 04:20:01 2011 active dsready Sat Jan 15 05:20:01 2011 active dsready Sat Jan 15 06:20:01 2011 active dsready Sat Jan 15 07:20:01 2011 active dsready Sat Jan 15 08:20:02 2011 active dsready Sat Jan 15 09:20:01 2011 active dsready Sat Jan 15 10:20:01 2011 active dsready Sat Jan 15 11:20:01 2011 active dsready Sat Jan 15 12:20:01 2011 active dsready Sat Jan 15 13:20:01 2011 active dsready Sat Jan 15 14:20:01 2011 active dsready Sat Jan 15 15:20:01 2011 active dsready Sat Jan 15 16:20:02 2011 active dsready Sat Jan 15 17:20:01 2011 active dsready Sat Jan 15 18:20:01 2011 active dsready Sat Jan 15 19:20:02 2011 active dsready Sat Jan 15 20:20:02 2011 active dsready Sat Jan 15 21:20:02 2011 active dsready Sat Jan 15 22:20:02 2011 active dsready Sat Jan 15 23:20:02 2011 active dsready Sun Jan 16 00:20:01 2011 active dsready Sun Jan 16 01:20:01 2011 active dsready Sun Jan 16 02:20:02 2011 active dsready Sun Jan 16 03:20:02 2011 active dsready Sun Jan 16 04:20:02 2011 active dsready Sun Jan 16 05:20:02 2011 active dsready Sun Jan 16 06:20:01 2011 active dsready Sun Jan 16 07:20:02 2011 active dsready Sun Jan 16 08:20:01 2011 active dsready Sun Jan 16 09:20:02 2011 active dsready Sun Jan 16 10:20:01 2011 active dsready Sun Jan 16 11:20:02 2011 active dsready Sun Jan 16 12:20:01 2011 active dsready Sun Jan 16 13:20:01 2011 active dsready Sun Jan 16 14:20:02 2011 active dsready Sun Jan 16 15:20:02 2011 active dsready Sun Jan 16 16:20:01 2011 active dsready Sun Jan 16 17:20:02 2011 active dsready Sun Jan 16 18:20:01 2011 active dsready Sun Jan 16 19:20:01 2011 active dsready Sun Jan 16 20:20:01 2011 active dsready Sun Jan 16 21:20:01 2011 active dsready Sun Jan 16 22:20:02 2011 active dsready Sun Jan 16 23:20:01 2011 active dsready Mon Jan 17 00:20:01 2011 active dsready Mon Jan 17 01:20:01 2011 active dsready Mon Jan 17 02:20:01 2011 active dsready Mon Jan 17 03:20:02 2011 active dsready Mon Jan 17 04:20:02 2011 active dsready Mon Jan 17 05:20:01 2011 active dsready Mon Jan 17 06:20:01 2011 active dsready Mon Jan 17 07:20:01 2011 active dsready Mon Jan 17 08:20:01 2011 active dsready Mon Jan 17 09:20:01 2011 active dsready Mon Jan 17 10:20:01 2011 active dsready Mon Jan 17 11:20:01 2011 active publish dsready Mon Jan 17 12:20:02 2011 active publish dsready Mon Jan 17 13:20:01 2011 retire active dsready Mon Jan 17 14:20:01 2011 retire active dsready Mon Jan 17 15:20:02 2011 retire active dsready Mon Jan 17 16:20:01 2011 active dsready Mon Jan 17 17:20:01 2011 active dsready Mon Jan 17 18:20:01 2011 active dsready Mon Jan 17 19:20:01 2011 active dsready Mon Jan 17 20:20:02 2011 active dsready Mon Jan 17 21:20:02 2011 active dsready Mon Jan 17 22:20:01 2011 active dsready Mon Jan 17 23:20:01 2011 active dsready Tue Jan 18 00:20:02 2011 active dsready Tue Jan 18 01:20:02 2011 active dsready Tue Jan 18 02:20:02 2011 active dsready Tue Jan 18 03:20:01 2011 active dsready Tue Jan 18 04:20:01 2011 active dsready Tue Jan 18 05:20:01 2011 active dsready Tue Jan 18 06:20:02 2011 active dsready Tue Jan 18 07:20:01 2011 active dsready Tue Jan 18 08:20:01 2011 active dsready Tue Jan 18 09:20:01 2011 active dsready Tue Jan 18 10:20:01 2011 active dsready Tue Jan 18 11:20:01 2011 active dsready Tue Jan 18 12:20:01 2011 active dsready Tue Jan 18 13:20:02 2011 active dsready Tue Jan 18 14:20:01 2011 active dsready Tue Jan 18 15:20:01 2011 active dsready Tue Jan 18 16:20:01 2011 active dsready Tue Jan 18 17:20:01 2011 active dsready Tue Jan 18 18:20:01 2011 active dsready Tue Jan 18 19:20:01 2011 active dsready Tue Jan 18 20:20:01 2011 active dsready Tue Jan 18 21:20:02 2011 active dsready Tue Jan 18 22:20:02 2011 active dsready Tue Jan 18 23:20:01 2011 active dsready Wed Jan 19 00:20:01 2011 active dsready Wed Jan 19 01:20:01 2011 active dsready Wed Jan 19 02:20:01 2011 active dsready Wed Jan 19 03:20:01 2011 active dsready Wed Jan 19 04:20:02 2011 active dsready Wed Jan 19 05:20:01 2011 active dsready Wed Jan 19 06:20:01 2011 active dsready Wed Jan 19 07:20:01 2011 active dsready Wed Jan 19 08:20:01 2011 active dsready Wed Jan 19 09:20:01 2011 active dsready Wed Jan 19 10:20:01 2011 active dsready Wed Jan 19 11:20:01 2011 active dsready Wed Jan 19 12:20:01 2011 active dsready Wed Jan 19 13:20:01 2011 active dsready Wed Jan 19 14:20:01 2011 active dsready Wed Jan 19 15:20:02 2011 active dsready Wed Jan 19 16:20:01 2011 active dsready Wed Jan 19 17:20:01 2011 active dsready Wed Jan 19 18:20:02 2011 active dsready Wed Jan 19 19:20:01 2011 active dsready Wed Jan 19 20:20:01 2011 active dsready Wed Jan 19 21:20:02 2011 active dsready Wed Jan 19 22:20:02 2011 active dsready Wed Jan 19 23:20:01 2011 active dsready Thu Jan 20 00:20:01 2011 active dsready Thu Jan 20 01:20:02 2011 active dsready Thu Jan 20 02:20:01 2011 active dsready Thu Jan 20 03:20:01 2011 active dsready Thu Jan 20 04:20:02 2011 active dsready Thu Jan 20 05:20:01 2011 active dsready Thu Jan 20 06:20:01 2011 active dsready Thu Jan 20 07:20:01 2011 active dsready Thu Jan 20 08:20:02 2011 active dsready Thu Jan 20 09:20:01 2011 active dsready
Date 63389 20670 58635 17879 10022 Tue Jan 11 10:13:41 2011 retire retire active Tue Jan 11 10:20:01 2011 retire retire active Tue Jan 11 11:20:01 2011 retire retire active Tue Jan 11 12:20:01 2011 retire retire active Tue Jan 11 13:20:01 2011 retire retire active Tue Jan 11 14:20:02 2011 retire retire active Tue Jan 11 15:20:01 2011 retire retire active Tue Jan 11 16:20:01 2011 retire publish retire active Tue Jan 11 17:20:01 2011 retire ready retire active Tue Jan 11 18:20:01 2011 retire active retire retire Tue Jan 11 19:20:01 2011 retire active retire retire Tue Jan 11 20:20:01 2011 retire active retire retire Tue Jan 11 21:20:02 2011 retire active retire retire Tue Jan 11 22:20:01 2011 retire active retire retire Tue Jan 11 23:20:01 2011 retire active retire retire Wed Jan 12 00:20:02 2011 retire active retire retire Wed Jan 12 01:20:01 2011 retire active retire retire Wed Jan 12 02:20:01 2011 retire active retire retire Wed Jan 12 03:20:02 2011 retire active retire retire Wed Jan 12 04:20:01 2011 retire active retire retire Wed Jan 12 05:20:02 2011 retire active retire retire Wed Jan 12 06:20:01 2011 retire active retire retire Wed Jan 12 07:20:01 2011 retire active retire retire Wed Jan 12 08:20:01 2011 retire active retire retire Wed Jan 12 09:20:01 2011 retire active retire retire Wed Jan 12 10:20:01 2011 retire active retire retire Wed Jan 12 11:20:01 2011 retire active retire retire Wed Jan 12 12:20:01 2011 active retire Wed Jan 12 13:20:01 2011 active retire Wed Jan 12 14:20:01 2011 active retire Wed Jan 12 15:20:01 2011 active retire Wed Jan 12 16:20:02 2011 active retire Wed Jan 12 17:20:02 2011 active retire Wed Jan 12 18:20:01 2011 active retire Wed Jan 12 19:20:01 2011 active retire Wed Jan 12 20:20:01 2011 active retire Wed Jan 12 21:20:01 2011 active retire Wed Jan 12 22:20:02 2011 active retire Wed Jan 12 23:20:02 2011 active retire Thu Jan 13 00:20:01 2011 active retire Thu Jan 13 01:20:01 2011 active retire Thu Jan 13 02:20:01 2011 active retire Thu Jan 13 03:20:01 2011 active retire Thu Jan 13 04:20:01 2011 active retire Thu Jan 13 05:20:01 2011 active retire Thu Jan 13 06:20:02 2011 active retire Thu Jan 13 07:20:02 2011 active retire Thu Jan 13 08:20:01 2011 active retire Thu Jan 13 09:20:01 2011 active retire Thu Jan 13 10:20:01 2011 active retire Thu Jan 13 11:20:01 2011 active retire Thu Jan 13 12:20:02 2011 active retire Thu Jan 13 13:20:01 2011 active retire Thu Jan 13 14:20:02 2011 active retire Thu Jan 13 15:20:02 2011 active retire Thu Jan 13 16:20:01 2011 active publish retire Thu Jan 13 17:20:02 2011 active publish retire Thu Jan 13 18:20:01 2011 active ready retire Thu Jan 13 19:20:01 2011 active ready Thu Jan 13 20:20:01 2011 active ready Thu Jan 13 21:20:01 2011 active ready Thu Jan 13 22:20:02 2011 active ready Thu Jan 13 23:20:01 2011 active ready Fri Jan 14 00:20:01 2011 active ready Fri Jan 14 01:20:01 2011 active ready Fri Jan 14 02:20:02 2011 active ready Fri Jan 14 03:20:02 2011 active ready Fri Jan 14 04:20:01 2011 active ready Fri Jan 14 05:20:01 2011 active ready Fri Jan 14 06:20:01 2011 active ready Fri Jan 14 07:20:01 2011 active ready Fri Jan 14 08:20:01 2011 active ready Fri Jan 14 09:20:01 2011 active ready Fri Jan 14 10:20:02 2011 active ready Fri Jan 14 11:20:01 2011 active ready Fri Jan 14 12:20:01 2011 active ready Fri Jan 14 13:20:01 2011 active ready Fri Jan 14 14:20:02 2011 active ready Fri Jan 14 15:20:01 2011 active ready Fri Jan 14 16:20:01 2011 active ready Fri Jan 14 17:20:01 2011 active ready Fri Jan 14 18:20:01 2011 active ready Fri Jan 14 19:20:02 2011 active ready Fri Jan 14 20:20:01 2011 active ready Fri Jan 14 21:20:01 2011 active ready Fri Jan 14 22:20:01 2011 active ready Fri Jan 14 23:20:01 2011 active ready Sat Jan 15 00:20:01 2011 active ready Sat Jan 15 01:20:01 2011 active ready Sat Jan 15 02:20:01 2011 active ready Sat Jan 15 03:20:01 2011 active ready Sat Jan 15 04:20:01 2011 active ready Sat Jan 15 05:20:01 2011 active ready Sat Jan 15 06:20:01 2011 active ready Sat Jan 15 07:20:01 2011 active ready Sat Jan 15 08:20:02 2011 active ready Sat Jan 15 09:20:01 2011 active ready Sat Jan 15 10:20:01 2011 active ready Sat Jan 15 11:20:01 2011 active ready Sat Jan 15 12:20:01 2011 active ready Sat Jan 15 13:20:01 2011 active ready Sat Jan 15 14:20:01 2011 active ready Sat Jan 15 15:20:01 2011 active ready Sat Jan 15 16:20:02 2011 active ready Sat Jan 15 17:20:01 2011 active ready Sat Jan 15 18:20:01 2011 active ready Sat Jan 15 19:20:02 2011 active ready Sat Jan 15 20:20:02 2011 active ready Sat Jan 15 21:20:02 2011 active ready Sat Jan 15 22:20:02 2011 active ready Sat Jan 15 23:20:02 2011 active ready Sun Jan 16 00:20:01 2011 active ready Sun Jan 16 01:20:01 2011 active ready Sun Jan 16 02:20:02 2011 active ready Sun Jan 16 03:20:02 2011 active ready Sun Jan 16 04:20:02 2011 active ready Sun Jan 16 05:20:02 2011 active ready Sun Jan 16 06:20:01 2011 active ready Sun Jan 16 07:20:02 2011 active ready Sun Jan 16 08:20:01 2011 active ready Sun Jan 16 09:20:02 2011 active ready Sun Jan 16 10:20:01 2011 active ready Sun Jan 16 11:20:02 2011 active ready Sun Jan 16 12:20:01 2011 active ready Sun Jan 16 13:20:01 2011 active ready Sun Jan 16 14:20:02 2011 active ready Sun Jan 16 15:20:02 2011 active ready Sun Jan 16 16:20:01 2011 active ready Sun Jan 16 17:20:02 2011 active ready Sun Jan 16 18:20:01 2011 active ready Sun Jan 16 19:20:01 2011 active ready Sun Jan 16 20:20:01 2011 active ready Sun Jan 16 21:20:01 2011 active ready Sun Jan 16 22:20:02 2011 active ready Sun Jan 16 23:20:01 2011 active ready Mon Jan 17 00:20:01 2011 active ready Mon Jan 17 01:20:01 2011 active ready Mon Jan 17 02:20:01 2011 active ready Mon Jan 17 03:20:02 2011 active ready Mon Jan 17 04:20:02 2011 active ready Mon Jan 17 05:20:01 2011 active ready Mon Jan 17 06:20:01 2011 active ready Mon Jan 17 07:20:01 2011 active ready Mon Jan 17 08:20:01 2011 active ready Mon Jan 17 09:20:01 2011 active ready Mon Jan 17 10:20:01 2011 active ready Mon Jan 17 11:20:01 2011 active ready Mon Jan 17 12:20:02 2011 active ready Mon Jan 17 13:20:01 2011 active ready Mon Jan 17 14:20:01 2011 active ready Mon Jan 17 15:20:02 2011 active ready Mon Jan 17 16:20:01 2011 active ready Mon Jan 17 17:20:01 2011 active ready Mon Jan 17 18:20:01 2011 active ready Mon Jan 17 19:20:01 2011 active ready Mon Jan 17 20:20:02 2011 active ready Mon Jan 17 21:20:02 2011 active ready Mon Jan 17 22:20:01 2011 active ready Mon Jan 17 23:20:01 2011 active ready Tue Jan 18 00:20:02 2011 active ready Tue Jan 18 01:20:02 2011 active ready Tue Jan 18 02:20:02 2011 active ready Tue Jan 18 03:20:01 2011 active ready Tue Jan 18 04:20:01 2011 active ready Tue Jan 18 05:20:01 2011 active ready Tue Jan 18 06:20:02 2011 active ready Tue Jan 18 07:20:01 2011 active ready Tue Jan 18 08:20:01 2011 active ready Tue Jan 18 09:20:01 2011 active ready Tue Jan 18 10:20:01 2011 active ready Tue Jan 18 11:20:01 2011 active ready Tue Jan 18 12:20:01 2011 active ready Tue Jan 18 13:20:02 2011 active ready Tue Jan 18 14:20:01 2011 active ready Tue Jan 18 15:20:01 2011 active ready Tue Jan 18 16:20:01 2011 active ready Tue Jan 18 17:20:01 2011 active ready Tue Jan 18 18:20:01 2011 active ready Tue Jan 18 19:20:01 2011 active ready Tue Jan 18 20:20:01 2011 active ready Tue Jan 18 21:20:02 2011 active ready Tue Jan 18 22:20:02 2011 active ready Tue Jan 18 23:20:01 2011 active ready Wed Jan 19 00:20:01 2011 active ready Wed Jan 19 01:20:01 2011 active ready Wed Jan 19 02:20:01 2011 active ready Wed Jan 19 03:20:01 2011 active ready Wed Jan 19 04:20:02 2011 active ready Wed Jan 19 05:20:01 2011 active ready Wed Jan 19 06:20:01 2011 active ready Wed Jan 19 07:20:01 2011 active ready Wed Jan 19 08:20:01 2011 active ready Wed Jan 19 09:20:01 2011 active ready Wed Jan 19 10:20:01 2011 active ready Wed Jan 19 11:20:01 2011 active ready Wed Jan 19 12:20:01 2011 active ready Wed Jan 19 13:20:01 2011 active ready Wed Jan 19 14:20:01 2011 active ready Wed Jan 19 15:20:02 2011 active ready Wed Jan 19 16:20:01 2011 active ready Wed Jan 19 17:20:01 2011 active ready Wed Jan 19 18:20:02 2011 active ready Wed Jan 19 19:20:01 2011 active ready Wed Jan 19 20:20:01 2011 active ready Wed Jan 19 21:20:02 2011 active ready Wed Jan 19 22:20:02 2011 active ready Wed Jan 19 23:20:01 2011 active ready Thu Jan 20 00:20:01 2011 active ready Thu Jan 20 01:20:02 2011 active ready Thu Jan 20 02:20:01 2011 active ready Thu Jan 20 03:20:01 2011 active ready Thu Jan 20 04:20:02 2011 active ready Thu Jan 20 05:20:01 2011 active ready Thu Jan 20 06:20:01 2011 active ready Thu Jan 20 07:20:01 2011 active ready Thu Jan 20 08:20:02 2011 active ready Thu Jan 20 09:20:01 2011 active ready
_______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
