is this "normal" if not what to do about it?
Mark Andrews
marka at isc.org
Tue Jan 27 06:38:23 CET 2015
Activation/inactivation is when named starts/stops signing with the key.
Inception/expiratioin is the time perion for which the signature is valid.
These are different time periods and are basically unrelated.
The inception will be < inactivation.
The expiratin will be > activation.
After a key is activated it will be used to sign records that change.
The sig-validity-interval (less a small random factor) is used to
determine for how long a signature is valid for.
Mark
In message <14b292cc598.2743.14d9188d684ea7b6d1324cf92af46b48 at klam.ca>, John writes:
> oops!! I swapped the ZSK and KSK in the table.
>
>
> On January 26, 2015 9:09:40 PM John <john at klam.ca> wrote:
>
> > my experimental zone (the family site) klam.ca has a KSK and a ZSK.
> > There appear to be time differences between the records reported by DIG
> > and the source records on file.
> > In the case of the ZSK the inactive date-time is a few hours different,
> > but in the ZSKs case it is 3 months.
> >
> > Is this a problem, and if so what do I do about it.
> >
> > The following dates were found in the source record and the output from dig.
> >
> > source record dig
> > KSK -A
> > 20150126163534 20150117012252
> > KSK -I
> > 20150225173534
> > 20150225144654
> >
> >
> >
> > ZSK -A
> > 20150126163534
> > 20150126173534
> > ZSK -I
> > 20150527015028
> > 20150225173534
> >
> >
> >
> > --
> > John Allen
> > KLaM
> > ------------------------------------------
> > If you are out to describe the truth, leave elegance to the tailor.
> >
> >
> >
> > ----------
> > _______________________________________________
> > Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> > unsubscribe from this list
> >
> > bind-users mailing list
> > bind-users at lists.isc.org
> > https://lists.isc.org/mailman/listinfo/bind-users
>
> ------------14b292ccdd3902274342ea2c58
> Content-Type: text/html; charset="UTF-8"
> Content-Transfer-Encoding: 8bit
>
> <html>
> <head>
>
>
> </head>
> <body>
> <div style="color: black;">
> <div style="color: black;">
> <p style="margin: 0 0 1em 0; color: black;">oops!! I swapped the ZSK and
> KSK in the table.</p>
> </div>
> <div style="color: black;">
> <p
> style="color: black; font-size: 10pt; font-family: Arial, sans-serif; margin: 10pt 0;">On
> January 26, 2015 9:09:40 PM John <john at klam.ca> wrote:</p>
> <blockquote type="cite" class="gmail_quote"
> style="margin: 0 0 0 0.75ex; border-left: 1px solid #808080; padding-left: 0.75ex;">
> <div class="moz-signature">my experimental zone (the family site)
> klam.ca has a KSK and a ZSK. <br>
> There appear to be time differences between the records reported
> by DIG and the source records on file. <br>
> In the case of the ZSK the inactive date-time is a few hours
> different, but in the ZSKs case it is 3 months.<br>
> <br>
> Is this a problem, and if so what do I do about it.<br>
> <br>
> The following dates were found in the source record and the output
> from dig.<br>
> <table border="1" cellpadding="2" cellspacing="2" width="100%">
> <tbody>
> <tr>
> <td valign="top"><br>
> </td>
> <td align="center" valign="top">source record </td>
> <td align="center" valign="top">dig<br>
> </td>
> </tr>
> <tr>
> <td valign="top">KSK -A <br>
> </td>
> <td align="center" valign="top">20150126163534 </td>
> <td align="center" valign="top">20150117012252<br>
> </td>
> </tr>
> <tr>
> <td valign="top">KSK -I<br>
> </td>
> <td align="center" valign="top">20150225173534<br>
> </td>
> <td align="center" valign="top">20150225144654<br>
> </td>
> </tr>
> <tr>
> <td valign="top"><br>
> </td>
> <td valign="top"><br>
> </td>
> <td valign="top"><br>
> </td>
> </tr>
> <tr>
> <td valign="top">ZSK -A<br>
> </td>
> <td align="center" valign="top">20150126163534<br>
> </td>
> <td align="center" valign="top">20150126173534</td>
> </tr>
> <tr>
> <td valign="top">ZSK -I<br>
> </td>
> <td align="center" valign="top">20150527015028<br>
> </td>
> <td align="center" valign="top">20150225173534<br>
> </td>
> </tr>
> </tbody>
> </table>
> <br>
> Â <br>
> -- <br>
> John Allen<br>
> KLaM<br>
> ------------------------------------------<br>
> If you are out to describe the truth, leave elegance to the
> tailor.
> </div>
>
> _______________________________________________<br>
> Please visit <a class="aqm-autolink aqm-autowrap"
> href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a>
> to unsubscribe from this list<br>
> <br>
> bind-users mailing list<br>
> bind-users at lists.isc.org<br>
> <a class="aqm-autolink aqm-autowrap"
> href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a><br></blockquote>
> </div>
> </div>
> </body>
> </html>
>
> ------------14b292ccdd3902274342ea2c58--
>
>
> --===============0592810492330139115==
> Content-Type: text/plain; charset="us-ascii"
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> Content-Disposition: inline
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> --===============0592810492330139115==--
>
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the dane-users
mailing list