To reproduce:
mkdir example.com
cd example.com
faketime -f '-1y' /usr/sbin/dnssec-keygen -f KSK -K . -a RSASHA256 -3 -b 2048
example.com
key=$(faketime -f '-1y' /usr/sbin/dnssec-keygen -K . -a RSASHA256 -3 -b 1024
-I +120d -D +150d example.com)
first=$key
lt=120
for i in `seq 1 5`; do
lt=$((lt + 120))
key=$(faketime -f '-1y' /usr/sbin/dnssec-keygen -K . -S "$key.key" -I
+${lt}d -D +$((lt+30))d example.com)
done
/usr/sbin/dnssec-coverage -K . -l 200d -c /usr/sbin/named-compilezone
example.com
rm $first.key $first.private
/usr/sbin/dnssec-coverage -K . -l 200d -c /usr/sbin/named-compilezone
example.com
Cheers,
--
| .''`. ** Debian **
Peter Palfrader | : :' : The universal
https://www.palfrader.org/ | `. `' Operating System
| `- https://www.debian.org/
