> I forced another ZSK roll-over on our test system and the same problem
> popped up.
> There are now two retiring ZSKs and one ready ZSK, but no active ZSK.
> In the zone file, many records are still signed with the retiring ZSK.
> However, this ZSK itself is no longer in the signed zone file.

To debug this I could really use your database or at the very least the
output of
        ods-enforcer key list -d


> Could it be that the option <Standby>1</Standby> causes these problems?


Attachment: signature.asc
Description: OpenPGP digital signature

Opendnssec-user mailing list

Reply via email to