We did a testing upgrade from ODS 1.4.14 to 2.1.8 There has been
enough procrastination regarding this upgrade. :)

With ODS version 1.4.14:

# ods-ksmutil key list -z nltestdomain.nl -t KSK
Keys:
Zone:                           Keytype:      State:    Date of next
transition:
nltestdomain.nl                 KSK           dssub     waiting for ds-seen
nltestdomain.nl                 KSK           active    *2026-03-14*
11:58:56

After the upgrade to 2.1.8 we have:

# ods-enforcer key list -z nltestdomain.nl -t KSK
Keys:
Zone:                           Keytype: State:    Date of next transition:
nltestdomain.nl                 KSK      retire    waiting for ds-gone
nltestdomain.nl                 KSK      active    *2021-03-19* 12:33:43

The date of the next transition for the ACTIVE key becomes 24 hours later.
While it was in 2026 before the migration.
Is that normal or something to worry about?

Thanks!
_______________________________________________
Opendnssec-user mailing list
Opendnssec-user@lists.opendnssec.org
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

Reply via email to