Uploaded image for project: 'OpenDNSSEC TRAC Import'
  1. OpenDNSSEC TRAC Import
  2. ODSTRACIMPORT-108

key import strange behaviour

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.0.0
    • Fix Version/s: None
    • Component/s: Enforcer
    • Labels:
      None

      Description

      As I want to keep my KSK which is configured as a trusted key in all my name servers, I import it each Time I try a new ODS from-scratch configuration. These are the commands I use...

      > softhsm --import ksk.pem --slot 0 --pin 1234 --label Afnic1 --id F1D0

      The key appears in the HSM.

      > ods-hsmutil list

      Repository ID Type
      --------- -- ---
      softHSM f1d0 RSA/2048

      I use the following command to import the key in ODS:

      > ods-ksmutil key import --cka_id f1d0 --repository softHSM --zone fr --keytype KSK --bits 2048 --algorithm 7 --keystate ACTIVE --time 20100202

      BUT when I list the keys, I have the following output...

      > ods-ksmutil --verbose key list
      SQLite database set to: /home/afnicreg/Key_Manager/ODS/var/kasp.db
      Keys:
      Zone: Keytype: State: Date of next transition: CKA_ID: Repository: Keytag:
      fr KSK active xpUÿ f1d0 softHSM 15858

      After several tries, the "Date of next transition" has never been human-readable...

        Attachments

          Activity

            People

            Assignee:
            sion Siôn Lloyd
            Reporter:
            vincent.levigneron@nic.fr vincent.levigneron
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: