On 01/19/2017 10:10 AM, Yuri Schaeffer wrote: >> @Yuri also: could there be a change in the policy/kasp which prevents >> generation of keys? > > Yes, you can set <ManualRollover/> in the <KSK> and <ZSK> sections. In > 1.4 for ZSK it will mean no ZSK will be generated at all. A KSK might be > generated but not rolled too unless issues by the user. >
I don't mean that, perhaps the policy has been changed such that now an algorithm or key length is being requested that isn't supported? \Berry
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
