Thanks, this helps a bit.
But "dead", "unknown" and "mixed" still result in "unknown keystate, Error parsing arguments" when used to export keys.

What should I use to export keys in the states "waiting for ds-seen" and "waiting for ds-gone"? (These are the ones (with the -ds option) that are needed during roll-overs to update the parent zone.)

Thanks for your patience.
Fred.Zwarts.

"Yuri Schaeffer" schreef in bericht news:37170e1f-d553-1db6-545c-ac2fc7002...@nlnetlabs.nl...

So, to get the export the --keystate option of ods-enforcer must be
used. I could not find in the documentation how the different keystates
can be specified. I see that "retire" and "active" are accepted, but
"ds-seen", or "waiting for ds-seen" result in "unknown keystate, Error
parsing arguments". Where can I find a list of acceptable keystates?

I made an issue for us to fix this code and documentation. For now, the
code defines the following states:

"generate", "publish", "ready", "active", "retire", "dead", "unknown",
"mixed"

//Yuri

_______________________________________________
Opendnssec-user mailing list
Opendnssec-user@lists.opendnssec.org
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

Reply via email to