It is now easy to roll both the KSK and ZSK at the same time because missing keytype flag implies rolling both keys. Is there a case where the user would like to do that?
Now you can accidentally do it, because you forget the keytype
- is cloned by
-
OPENDNSSEC-496 CLONE - Make the keytype flag required when rolling keys
-
- Open
-
- relates to
-
OPENDNSSEC-398 The ods-ksmutil key rollover command does not work correctly when rolling all keys using the --policy option
-
- Closed
-