Uploaded image for project: 'OpenDNSSEC'
  1. OpenDNSSEC
  2. OPENDNSSEC-202

Setup says that no keys are needed but keys are generated

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.0.0
    • Component/s: Enforcer NG
    • Labels:

      Description

      I configured the KSK lifetime to be 4 months and ZSK lifetime to 4 hours. The auto generate period was set to 4 hours.

      The setup command will say that no keys are needed but two are generated anyways. The first text must be wrong.

      user@ubuntu:/var/opendnssec$ sudo ods-enforcer setup
      no KSK keys of 2048 bits needed.
      no ZSK keys of 1024 bits needed.
      generating 1 KSKs of 2048 bits.
      generating 2048 bit RSA key in repository: SoftHSM
      key generation successful: 5883d5dcc5a59799582001a7cf9c4b35
      finished generating 2048 bit KSKs.
      generating 1 ZSKs of 1024 bits.
      generating 1024 bit RSA key in repository: SoftHSM
      key generation successful: 10cad40630c2fcb95f76e56de2d3e737
      finished generating 1024 bit ZSKs.
      flushing all tasks...
      setup completed in 1 seconds.

        Attachments

          Activity

            People

            Assignee:
            yuri Yuri Schaeffer
            Reporter:
            rickard Rickard Bellgrim
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: