The proposed interface for the command could be ods-ksmutil key delete --cka_id LOCATOR [--force]
If the key is in the GENERATE state, could be deleted without any side effect. If the key is in any other state, the key won't be deleted and the command will complain. That behavior can be overridden by the --force option.
- relates to
-
OPENDNSSEC-76 "purge unused keys"
-
- Closed
-