Uploaded image for project: 'Support'
  1. Support
  2. SUPPORT-250

CSK missing RRSIGs

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 2.1.5
    • Fix Version/s: 2.1.6
    • Component/s: Signer
    • Labels:
      None
    • Environment:

      OS: OpenBSD 6.6-CURRENT

      OpenDNSSEC: 2.1.5

      SoftHSM2: 2.5.0

      Description

      When using CSK instead of KSK+ZSK no RRSIG records are created. Please try to replicate. I attach the used zonefile (example.com) and kasp.xml as well as resulting signed zones for csk (example.com_csk) and ksk_zsk (example.com_ksk_zsk) policies and syslog.

        Attachments

        1. kasp.xml
          3 kB
        2. example.com
          0.2 kB
        3. example.com_csk
          0.9 kB
        4. example.com_ksk_zsk
          2 kB
        5. syslog
          4 kB

          Activity

            People

            Assignee:
            berry Berry van Halderen
            Reporter:
            scd01 Daniel
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: