Hi List! I have tested the deb package but did get get it work.. so I installed the src from the site and softhsm..
It starts and reads the zone but it don't sign the zone? Or creates the file. I don't get any errors. Tried with 2 different zone's ns:~# ods-ksmutil update zonelist zonelist filename set to /etc/opendnssec/zonelist.xml. kasp filename set to /etc/opendnssec/kasp.xml. Zone jamten.se found Policy set to default. Zone jll.se found Policy set to default. Notifying enforcer of new database... ns:~# tail -f /var/log/messages Dec 11 11:48:18 ns ods-enforcerd: Config will be output to /var/opendnssec/signconf/jamten.se.xml. Dec 11 11:48:18 ns ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for jamten.se and use ods-ksmutil key ds-seen when the DS appears in the DNS. Dec 11 11:48:18 ns ods-enforcerd: No change to: /var/opendnssec/signconf/jamten.se.xml Dec 11 11:48:18 ns ods-enforcerd: Zone jll.se found. Dec 11 11:48:18 ns ods-enforcerd: Policy for jll.se set to default. Dec 11 11:48:18 ns ods-enforcerd: Config will be output to /var/opendnssec/signconf/jll.se.xml. Dec 11 11:48:18 ns ods-enforcerd: WARNING: New KSK has reached the ready state; please submit the DS for jll.se and use ods-ksmutil key ds-seen when the DS appears in the DNS. Dec 11 11:48:18 ns ods-enforcerd: No change to: /var/opendnssec/signconf/jll.se.xml Dec 11 11:48:18 ns ods-enforcerd: Disconnecting from Database... Dec 11 11:48:18 ns ods-enforcerd: Sleeping for 3600 seconds. ns:~# ods-ksmutil keys list Keys: Zone: Keytype: State: Date of next transition: jamten.se KSK ready waiting for ds-seen jamten.se ZSK active 2013-01-09 14:28:06 jll.se KSK ready waiting for ds-seen jll.se ZSK active 2013-01-09 14:48:00 Med vänliga hälsningar / Best regards / Ystävällisin terveisin / S pozdravem, //Anders Larsson Technical Security Specialist * Tieto, Managed Services and Transformation, MDZ Datacenter Services, MDN * Tredje Bassängvägen 2 * SE-115 83 Stockholm * Visitors address: Fjärde Bassängvägen 15 www.tieto.com * Tel: +46 (0)10 481 02 20 * Mobil: +46 (0)70 656 42 64 * Mail: [email protected] ********************************************** ---- Debian is they way to salvation ---- --- How Hard Can It Be --- _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
