-
Type:
New Feature
-
Status: Closed
-
Priority:
Trivial
-
Resolution: Fixed
-
Affects Version/s: trunk
-
Fix Version/s: None
-
Component/s: Enforcer
-
Labels:None
This a feature/bug-fixing request. Currently OpenDNSSEC records in the log when a ZSK is rolled over "ZSK has been rolled over for <ZONE>".
Although the current code for the message is generic for ZSK/KSK, actually it doesn't get executed during a KSK rollover because the condition in enforcer/ksm/ksm_request.c:454, so the message needs to go somewhere else. I think putting the message when the transition from KEYPUBLISH/READY to ACTIVE happens could be an option.