Hi Fred, On Fri, Jul 20, 2012 at 1:19 PM, Fred Zwarts (KVI) <[email protected]> wrote: > What does that mean exactly? Will OpenDNSSEC continue to sign the zone with > the old key until the backup notification is done, or will it stop signing > the zone, because the old key is retiring and the new key is not yet ready?
For what I know, if the Signer have received a key to sign the zone with it will continue to do that. Key management is handled by the Enforcer and it will not use a new key until you back it up if that repository is marked with RequireBackup. /Jerry _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
