Re: DNSSEC key rollover problems

2011-12-29 Thread Hugo Salgado
On 12/28/2011 10:42 PM, Spain, Dr. Jeffry A. wrote: > > First of all is it correct that the time stamps shown by dig for RRSIG > records are in local time? Otherwise, if the time stamps show UTC, then > the RRSIG for jaspain.net SOA for ZSK 42152 was generated at > 2011121023, one hour prior t

DNSSEC key rollover problems

2011-12-28 Thread Spain, Dr. Jeffry A.
This issue relates to the server nstest.jaspain.net (74.203.156.157), which is running bind 9.9.0b2. Please refer to http://dnsviz.net/d/jaspain.net/dnssec/. The RRSIGs on the jaspain.net , A, and TXT RRSets signed by ZSK 35297 expired on 12/17/2011, and those RRSets have not been resigned w