Re: [Opendnssec-user] Questions about SoftHSM and 'ods-ksmutil backup'

2015-09-24 Thread Rickard Bellgrim
On Thu, Sep 24, 2015 at 4:55 PM, Rick van Rein wrote: > > The SQLite backups are made at the database level, and that is the level > at which you should look for tooling support for import / recover the > backup. The default procedure in lieu of any would be to stop KASP, > replace the database

Re: [Opendnssec-user] Questions about SoftHSM and 'ods-ksmutil backup'

2015-09-24 Thread Rick van Rein
Hi Jake, The backup commands of the KASP are designed for signalling purposes; keys may be configured to stay unused until a backup of them has been confirmed, so the KASP has a command for signalling that a backup was made. The SQLite backups are made at the database level, and that is the lev

[Opendnssec-user] Questions about SoftHSM and 'ods-ksmutil backup'

2015-09-24 Thread Jake Zack
I'm trying to sync the kaspdb between two servers, which I expect to do periodically to counter drift between two signing boxes. On the primary, I'm using ods-ksmutil backup to prepare and create /var/opendnssec/kasp.db.backup: -rw-r--r-- 1 ods ods 39936 Sep 24 10:36 /var/opendnssec/kasp.db.bac