> root@traxotic [~]$ ods-enforcer queue > There are 0 tasks scheduled. > It is now Mon Nov 13 11:11:20 2017 (1510567880 seconds since epoch) > queue completed in 0 seconds.
This stands out. For some reason the enforcer thinks there is nothing to do. While this could happen when all your rollovers are manual / are waiting for user input, your key list output shows you are in a ZSK rollover. So it really should have at least that zone queued. It does explain why the signconf hasn't been written. Can you force it to enforce the zones: - ods-enforcer enforce Then check the queue again to see whether the zones are properly scheduled. A signconf SHOULD be produced and the zone SHOULD be scheduled for later (Based on the information you provided I think in approx 1 day). If anything seems wrong please go through the enforcer logs. At this point I don't know a cause yet. Is this the first opendnssec run after the migration or was it restarted at some point? > I'm not able to dump the kasp.db database file. Maybe due to a versioning > incompatibility (.db file versus db_dump)? Passing me the file will work fine. But it might no be necessary now. //Yuri
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
