# ods-enforcer key list --zone 37.125.129.in-addr.arpa
Keys:
Zone: Keytype: State: Date of next transition:
37.125.129.in-addr.arpa KSK retire 2016-08-11 04:53:24
37.125.129.in-addr.arpa KSK active 2016-08-11 04:53:24
37.125.129.in-addr.arpa ZSK retire 2016-08-11 04:53:24
37.125.129.in-addr.arpa ZSK active 2016-08-11 04:53:24
37.125.129.in-addr.arpa ZSK ready 2016-08-11 04:53:24
key list completed in 0 seconds.
# ods-enforcer queue
There are 2 tasks scheduled.
It is now Fri Aug 12 09:13:24 2016 (1470986004 seconds since epoch)
Next task scheduled Fri Aug 12 16:33:10 2016 (1471012390 seconds since
epoch)
On Fri Aug 12 16:33:10 2016 I will [enforce] KVI.nl
On Fri Nov 18 11:10:04 2016 I will [resalt] policies
queue completed in 0 seconds.
# date
Fri Aug 12 09:14:01 CEST 2016
#
Is it normal that only KVI.nl is mentioned in the queues, not the other
domains?
Fred.Zwarts.
"Yuri Schaeffer" schreef in bericht
news:fa5bd541-5887-e339-3932-61dfc6b50...@nlnetlabs.nl...
Today I noticed something else on our test system with ods 2.0.1:
# date
Thu Aug 11 15:48:31 CEST 2016
# ods-enforcer key list --zone 37.125.129.in-addr.arpa
Keys:
Zone: Keytype: State: Date of next
transition:
37.125.129.in-addr.arpa KSK retire 2016-08-11 04:53:24
37.125.129.in-addr.arpa KSK active 2016-08-11 04:53:24
37.125.129.in-addr.arpa ZSK retire 2016-08-11 04:53:24
37.125.129.in-addr.arpa ZSK active 2016-08-11 04:53:24
37.125.129.in-addr.arpa ZSK ready 2016-08-11 04:53:24
key list completed in 0 seconds.
#
Should it worry me that all dates-times are in the past?
Not necessarily. That date of next transition is for displaying purposes
only. To be able to print something that is like ODS 1.4.
Though it is unexpected. Could you check the output of
ods-enforcer queue
It should be the time the zone is enforced again by the way. Not
specifically the key. So all having the same time is normal.
//Yuri
_______________________________________________
Opendnssec-user mailing list
Opendnssec-user@lists.opendnssec.org
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
_______________________________________________
Opendnssec-user mailing list
Opendnssec-user@lists.opendnssec.org
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
