1c363c5ca8
3528. [func] New "dnssec-coverage" command scans the timing
metadata for a set of DNSSEC keys and reports if a
lapse in signing coverage has been scheduled
inadvertently. (Note: This tool depends on python;
it will not be built or installed on systems that
do not have a python interpreter.) [RT #28098]
(cherry picked from commit 831f59eb43)
11 lines
340 B
Plaintext
11 lines
340 B
Plaintext
This set contains one ZSK rollover. The ZSK is unpublished before its
|
|
successor is published. Tool output should resemble:
|
|
|
|
Checking KSK events for zone example.com, algorithm 7:
|
|
OK
|
|
|
|
Checking ZSK events for zone example.com, algorithm 7:
|
|
ERROR: After 2012-06-Oct (21:13:45):
|
|
Delete: example.com/007/25967 (ZSK)
|
|
No ZSK's are published
|