Op 10-08-16 om 17:38 schreef Yuri Schaeffer:
>
>
> On 10-08-16 15:13, Fred.Zwarts wrote:
>> Thanks, this helps a bit.
>> But "dead", "unknown" and "mixed" still result in "unknown keystate,
>> Error parsing arguments" when used to export keys.
>
> Ah yes, I was reading the wrong piece of code. T
On 10-08-16 15:13, Fred.Zwarts wrote:
Thanks, this helps a bit.
But "dead", "unknown" and "mixed" still result in "unknown keystate,
Error parsing arguments" when used to export keys.
Ah yes, I was reading the wrong piece of code. There is some more code
that applies a filter on the input ar
Thanks, this helps a bit.
But "dead", "unknown" and "mixed" still result in "unknown keystate, Error
parsing arguments" when used to export keys.
What should I use to export keys in the states "waiting for ds-seen" and
"waiting for ds-gone"?
(These are the ones (with the -ds option) that are n
So, to get the export the --keystate option of ods-enforcer must be
used. I could not find in the documentation how the different keystates
can be specified. I see that "retire" and "active" are accepted, but
"ds-seen", or "waiting for ds-seen" result in "unknown keystate, Error
parsing arguments"
So, to get the export the --keystate option of ods-enforcer must be used. I
could not find in the documentation how the different keystates can be
specified. I see that "retire" and "active" are accepted, but "ds-seen", or
"waiting for ds-seen" result in "unknown keystate, Error parsing argument
# ods-enforcer key list --zone KVI.nl
Keys:
Zone: Keytype: State:Date of next transition:
KVI.nl KSK retire2016-08-12 16:33:10
KVI.nl ZSK active2016-08-12 16:33:10
KVI.nl ZSK
Hi Fred,
On 09-08-16 17:14, Fred.Zwarts wrote:
There are active and ready keys:
# ods-enforcer key list --zone KVI.nl
Keys:
Zone: Keytype: State:Date of next transition:
KVI.nl KSK retire2016-08-12 16:33:10
KVI.nl
Rohani
Sent: Tuesday, August 9, 2016 4:50 PM
To: Fred.Zwarts ; opendnssec-user@lists.opendnssec.org
Subject: Re: [Opendnssec-user] key export in ods 2.0.1
Hello Fred,
key export command returns ready and active KSKs by default. It seems your
KSKs are not in those states.
If you want to export other
Hello Fred,
key export command returns ready and active KSKs by default. It seems your KSKs
are not in those states.
If you want to export other keys you can explicitly specify key state or key
type.
key export
--zone | --all
[--keystate ]
After the first impression, mentioned in my previous mail, I continued to
adapt some scripts.
I like very much the --parsable option of ods-enforcer.
There is something that I do not understand.
I was used to parse the output of "ods-ksmutil key export --zone KVI.nl",
but now the command "ods-e
10 matches
Mail list logo
