> We never had this problem with 1.4. From our /etc/opendnssec/kasp.xml: > > <Zone> > <PropagationDelay>PT15H</PropagationDelay> > <SOA> > <TTL>PT86400S</TTL> > <Minimum>PT10800S</Minimum> > <Serial>datecounter</Serial> > </SOA> > </Zone> > > The kasp.xml has not been touched since December 2015. > So, there must be something else. Could it be that the migration of the > database changed it from datacounter to keep? > Should I update the configuration after the migration?
The log message really seem to suggest 'keep' is used. Can you check the SOA section of /var/opendnssec/signconf/kvi.nl (or similar path)? If it says 'keep' in the signconf you should make sure the enforcerd reads the kasp.xml from the correct location. If it does -something odd has happend during conversion- you can issue a 'ods-enforcer policy import' to have the enforcer reread the kasp.xml. Regards, Yuri
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Opendnssec-user mailing list Opendnssec-user@lists.opendnssec.org https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
