> I forced another ZSK roll-over on our test system and the same problem > popped up. > There are now two retiring ZSKs and one ready ZSK, but no active ZSK. > In the zone file, many records are still signed with the retiring ZSK. > However, this ZSK itself is no longer in the signed zone file.
To debug this I could really use your database or at the very least the output of ods-enforcer key list -d //Yuri > Could it be that the option <Standby>1</Standby> causes these problems? unlikely.
Description: OpenPGP digital signature
_______________________________________________ Opendnssec-user mailing list Opendnssecemail@example.com https://lists.opendnssec.org/mailman/listinfo/opendnssec-user