On Wednesday 26 Jan 2011 10:16:39 AM Rickard Bellgrim wrote: > On 19 jan 2011, at 23.28, Sebastian Castro wrote: > > Back to the original subject: This test should work or not? Is > > OpenDNSSEC prepared for a policy change for a zone? > > It should work. > > Sion, could you have a look on this?
Sorry it took me a while to get time to look at this. It should work... Could you send me your kasp.db (off-list) and I'll see what is going on. I suspect that it is stopping the roll because there are no ready keys on the new policy, but not promoting any keys because there is a ready key on the zone... In other words it might be a consequence of the state of keys on the zone at the time that you changed the policy. Cheers, Sion _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
