Major Hello,
Attached is a patch that adds 2-phase key backup to ods-ksmutil. It does this by first assigning a temporary state during "backup prepare" and later "backup commit" will then do what "backup done" does right away. There is a "backup rollback" to undo "backup prepare". The "backup done" 1-phase key backup is left in place.
Please add this to OpenDNSSEC before the 1.1.2 release. As explained, we are looking to use 1.1.2 for our setup as our headstart to the 1.2 release that is delayed. With 1.1.2 we can get our service started in high-availability mode.
The first patch I submit is relative to my previous "policy prune" patch. The second (if Trac will let me add it) is relative to pristine 1.1.1 from the tarball.
Thanks for a great signer product,
and hoping to have added back in the best communal fashion,
Rick van Rein
for SURFnet