[Opendnssec-user] timings and ttl

2013-09-19 Thread Mathieu Arnold
Hi, I was just wondering about the TTL of RRSIGs, say I have my ZSK rollover set for every 30 days, if I add a record with a 10 weeks TTL, (yes, that's a bit stupid, but, for the sake of the argument,) its RRSIG will also have a 10 weeks TTL, and will still be alive in a cache somewhere long after

Re: [Opendnssec-user] timings and ttl

2013-09-19 Thread Joe Abley
On 2013-09-19, at 12:20, Mathieu Arnold wrote: > I was just wondering about the TTL of RRSIGs, say I have my ZSK rollover > set for every 30 days, if I add a record with a 10 weeks TTL, (yes, that's > a bit stupid, but, for the sake of the argument,) its RRSIG will also have > a 10 weeks TTL, an

Re: [Opendnssec-user] Bad signerd crash.

2013-09-19 Thread Mathieu Arnold
+--On 19 septembre 2013 08:46:40 +0200 Jerry Lundström wrote: | Hi, | | On 19 sep 2013, at 07:37, Matthijs Mekking wrote: | |>> Then the signer crashed (btw, can't find a core file, should be in the |>> tmp directory, right ?, how do I get one ?) leaving its control socket |>> around, and, prev

Re: [Opendnssec-user] Bad signerd crash.

2013-09-19 Thread Mathieu Arnold
+--On 19 septembre 2013 07:37:30 +0200 Matthijs Mekking wrote: | Do you have logs from between start and Sep 17 20:24:09? Oh, yes, I do. I do have quite a lot of zones it may be quite large, I'll see if I can put it somewhere. | Core file, depends on the system. When testing it is my experience

Re: [Opendnssec-user] Bad signerd crash.

2013-09-19 Thread Mathieu Arnold
+--On 19 septembre 2013 08:16:25 +0200 Rickard Bellgrim wrote: |> Looking at the code (shared/hsm.c), it looks like hsm_find_key_by_id() |> returns NULL, but libhsm does not provide an error. After a couple of |> tries, the signer reports "key not found". |> | | Could it be related to: | https:/