831f59eb43
3528. [func] New "dnssec-coverage" command scans the timing metadata for a set of DNSSEC keys and reports if a lapse in signing coverage has been scheduled inadvertently. (Note: This tool depends on python; it will not be built or installed on systems that do not have a python interpreter.) [RT #28098]
11 lines
352 B
Plaintext
11 lines
352 B
Plaintext
This set includes one ZSK rollover. The first ZSK is deactivated
|
|
prior to its replacement being activated. Tool output should resemble:
|
|
|
|
Checking KSK events for zone example.com, algorithm 7:
|
|
OK
|
|
|
|
Checking ZSK events for zone example.com, algorithm 7:
|
|
ERROR: After 2012-05-Dec (20:39:32):
|
|
Inactive: example.com/005/08376 (ZSK)
|
|
No ZSK's are active
|