upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-02-25 02:42:33 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
bind9/bin/tests/system/coverage/01-ksk-inactive
History
Evan Hunt 831f59eb43 [master] add dnssec-coverage tool 
3528.	[func]		New "dnssec-coverage" command scans the timing
			metadata for a set of DNSSEC keys and reports if a
			lapse in signing coverage has been scheduled
			inadvertently. (Note: This tool depends on python;
			it will not be built or installed on systems that
			do not have a python interpreter.) [RT #28098]
2013-03-20 14:39:13 -07:00
..
expect [master] add dnssec-coverage tool 2013-03-20 14:39:13 -07:00
README [master] add dnssec-coverage tool 2013-03-20 14:39:13 -07:00

README 

This set includes one KSK rollover.  The KSK is deactivated prior to
its replacement being activated.  Tool output should resemble:

Checking KSK events for zone example.com, algorithm 7:
ERROR: After 2012-31-Jul (20:59:14):
    Inactive: example.com/007/45435 (KSK)
No KSK's are active

Checking ZSK events for zone example.com, algorithm 7:
OK