On 03/09/2014 04:54 PM, Jakob Schlyter wrote: > On 7 mar 2014, at 20:02, Erik Østlyngen <[email protected]> > wrote: > >> <Lifetime>PT4H</Lifetime> > > I usually set this to 10 years or so when I expect manual key > rollover.
My reason for having a 4h key lifetime here is that I wanted to observe what OpenDNSSec does at the time of key rollover. The question (which was not so clear in my first message) is whether the ManualRollover tag prevents OpenDNSSec from initiating an automatic rollover when the key expires? That is what I expected, but OpenDNSSec seems to roll the key regardless of the ManualRollover tag. Maybe the tag has a different purpose than what I thought it had? Erik Østlyngen UNINETT Norid _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
