>> That is almost exactly the same Keys config as I have >> in kasp.xml. Only differences are that my ZSK Lifetime >> is P90D and my ZSK Algorithm length is 1024. >> >> The strange thing is that my KSK keys only have 90 days >> until next transition from when they were created, as shown >> with this command (output somewhat edited): >> >> $ ods-enforcer key list -v >> Keys: >> Zone: Keytype: State: Date of next transition: Size: Algorithm: >> xxx.se KSK active 2019-01-03 13:35:10 2048 8 >> xxx.se ZSK active 2019-01-03 13:35:10 1024 8 >> yyy.se KSK active 2019-01-03 14:38:48 2048 8 >> yyy.se ZSK active 2019-01-03 14:38:48 1024 8 > > Sigh. That is very irritating, yes. That command shows the > comparable dates in my case as well.
Wow! That's just Wrong. Anyone care to defend this behaviour? Regards, - Håvard _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
