Hi Yuri -- > On 10.02.2015, at 22:25, Yuri Schaeffer <[email protected]> wrote:
>> Must I just add an additional <NS>...</NS> section? Shall I ignore >> those differences? I cannot find 86400 in my kasp.xml anywhere? > > I think I know what the confusion is about. > > The DS/TTL is to inform OpenDNSSEC about how this record is published > at the parent. Rather than an instruction to publish it with TTL X. > > It needs this information to get the timing right and it is important > in case you are rolling your KSK. So set it in the KASP to 86400 seconds. Ah, I see! Now, I understand the corresponding documentation regarding <Parent>, thanks. I set that entry to 86400 seconds, now. > As for the 4035 compliance issue. You must take this up with your > parent/registrar. Most likely you can fix it in their web interface. No, not in my provider's interface. I will most likely have to open a ticket. Thank you for your info and regards, Michael _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
