-
Type:
Bug
-
Status: Accepted
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 107 : 27 Jun
-
Labels:
The key export command will also export the old DS when the new KSK is ready. Was it so that the export command should output the same information as the DSSubmitCommand receives?
(Unless explicitly given the keystate flag)
ubuntu@ip-10-48-57-121:~$ sudo ods-ksmutil key list
SQLite database set to: /var/opendnssec/kasp.db
Keys:
Zone: Keytype: State: Date of next transition:
groupX.odslab.se KSK active 2011-06-22 13:57:02
groupX.odslab.se ZSK retire 2011-06-22 14:51:19
groupX.odslab.se ZSK active 2011-06-22 15:41:19
groupX.odslab.se KSK ready waiting for ds-seen
ubuntu@ip-10-48-57-121:~$ sudo ods-ksmutil key export --zone groupX.odslab.se --ds
SQLite database set to: /var/opendnssec/kasp.db
;ready KSK DS record (SHA1):
groupX.odslab.se. 3600 IN DS 62246 8 1 ca11e580922a0da61048505c0ebce1c143d98fa2 ; xudic-cynam-bogyd-pefip-kugag-meguh-sufur-somis-cybit-nafep-dexex
;ready KSK DS record (SHA256):
groupX.odslab.se. 3600 IN DS 62246 8 2 05597c2e8b20db34d83bae10a40aaf73db0b659974bdc46647730706813c8433 ; xeceh-nuzod-vedud-bekyf-gakef-rurec-bunub-parel-fekob-rynon-nytar-tucik-kucel-foceb-kabif-secaf-fuxux
;active KSK DS record (SHA1):
groupX.odslab.se. 3600 IN DS 1291 8 1 7a9fe9b6f827c73295fd13cc7adc5a1dd07042b7 ; xivin-zepir-kavud-lycof-dohoz-tyges-sovut-sykac-tugel-bibyr-lixox
;active KSK DS record (SHA256):
groupX.odslab.se. 3600 IN DS 1291 8 2 ff6ef0e744438c50ff6a7d48760570c831e39f13b1f97a58a410ab70e10150f2 ; xuzok-vesuv-lacyg-fafyh-bozuk-pizog-mytib-hasos-mesuv-felyc-fesyz-nivuh-menyc-bopul-bomob-cygiz-daxox