-
Type:
Bug
-
Status: Accepted
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 16 : 28 Sep
-
Labels:
Having two repositories like this:
<Repository name="sca6000">
<Module>/usr/lib/opencryptoki/libopencryptoki.so.0</Module>
<TokenLabel>dnssec</TokenLabel>
<PIN>dnssec:apa123456</PIN>
<Capacity>1000</Capacity>
<RequireBackup/>
</Repository>
<Repository name="smartcard">
<Module>/usr/lib/opensc-pkcs11.so</Module>
<TokenLabel>OpenSC Card (KSK PIN)</TokenLabel>
<PIN>1234</PIN>
<Capacity>1</Capacity>
</Repository>
The smartcard respository does not require backup. But ksmutil still reports that it needs backup:
SQLite database set to: /var/opendnssec/kasp.db
Repositories:
Name: Capacity: RequireBackup:
sca6000 1000 Yes
smartcard 1 No
Policies:
Name: Description:
default The .SE DNSSEC Policy
Keys:
Zone: Keytype: State: Date of next transition:
se KSK active 2011-09-17 12:26:18
se ZSK active 2009-10-15 12:26:18
se KSK active 2011-01-01 00:00:00
Rollovers:
Zone: Keytype: Rollover expected:
se KSK 2011-09-17 12:26:18
se ZSK 2009-10-15 12:26:18
se KSK 2011-01-01 00:00:00
Backups:
Date: Repository:
2009-09-17 12:25:53 sca6000
Repository smartcard has unbacked up keys