2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-23 10:39:16 +00:00
Evan Hunt 831f59eb43 [master] add dnssec-coverage tool
3528.	[func]		New "dnssec-coverage" command scans the timing
			metadata for a set of DNSSEC keys and reports if a
			lapse in signing coverage has been scheduled
			inadvertently. (Note: This tool depends on python;
			it will not be built or installed on systems that
			do not have a python interpreter.) [RT #28098]
2013-03-20 14:39:13 -07:00
..
2013-03-20 14:39:13 -07:00
2013-03-20 14:39:13 -07:00

This set includes one ZSK rollover.  The first ZSK is deactivated
prior to its replacement being activated.  Tool output should resemble:

Checking KSK events for zone example.com, algorithm 7:
OK

Checking ZSK events for zone example.com, algorithm 7:
ERROR: After 2012-05-Dec (20:39:32):
    Inactive: example.com/005/08376 (ZSK)
No ZSK's are active