+++ /dev/null
-2008-12-18 01:02:56.187: notice: ------------------------------------------------------------
-2008-12-18 01:02:56.187: notice: running ../../dnssec-signer -v -v
-2008-12-18 01:02:56.589: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2008-12-18 01:02:56.589: debug: Check RFC5011 status
-2008-12-18 01:02:56.589: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2008-12-18 01:02:56.589: debug: Check KSK status
-2008-12-18 01:02:56.589: debug: Check ZSK status
-2008-12-18 01:02:56.590: debug: Lifetime(390 sec) of depreciated key 45361 exceeded (124287 sec)
-2008-12-18 01:02:56.590: info: "sub.example.net.": old ZSK 45361 removed
-2008-12-18 01:02:56.604: debug: ->remove it
-2008-12-18 01:02:56.604: debug: Re-signing necessary: Modfied zone key set
-2008-12-18 01:02:56.604: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
-2008-12-18 01:02:56.604: debug: Writing key file "./sub.example.net/dnskey.db"
-2008-12-18 01:02:56.605: debug: Signing zone "sub.example.net."
-2008-12-18 01:02:56.605: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -3 BE70E4 -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2008-12-18 01:02:56.970: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2008-12-18 01:02:56.971: debug: Signing completed after 0s.
-2008-12-18 01:02:56.971: debug:
-2008-12-18 01:02:56.971: debug: parsing zone "example.net." in dir "./example.net"
-2008-12-18 01:02:56.971: debug: Check RFC5011 status
-2008-12-18 01:02:56.971: debug: Check ZSK status
-2008-12-18 01:02:56.971: debug: Re-signing necessary: Zone file edited
-2008-12-18 01:02:56.971: notice: "example.net.": re-signing triggered: Zone file edited
-2008-12-18 01:02:56.972: debug: Writing key file "./example.net/dnskey.db"
-2008-12-18 01:02:56.972: debug: Incrementing serial number in file "./example.net/zone.db"
-2008-12-18 01:02:56.973: debug: Signing zone "example.net."
-2008-12-18 01:02:56.973: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private"
-2008-12-18 01:02:57.106: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2008-12-18 01:02:57.106: debug: Signing completed after 1s.
-2008-12-18 01:02:57.106: debug:
-2008-12-18 01:02:57.106: notice: end of run: 0 errors occured
-2008-12-18 01:03:01.191: notice: ------------------------------------------------------------
-2008-12-18 01:03:01.192: notice: running ../../dnssec-signer -d -v -v
-2008-12-18 01:03:01.194: debug: parsing zone "dyn.example.net." in dir "./dyn.example.net"
-2008-12-18 01:03:01.194: debug: Check RFC5011 status
-2008-12-18 01:03:01.194: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2008-12-18 01:03:01.194: debug: Check KSK status
-2008-12-18 01:03:01.194: warning: "dyn.example.net.": lifetime of key signing key 42138 exceeded since 10w4d3h1m4s
-2008-12-18 01:03:01.194: debug: Check ZSK status
-2008-12-18 01:03:01.195: debug: Lifetime(1209600 +/-150 sec) of active key 1355 exceeded (11588464 sec)
-2008-12-18 01:03:01.195: debug: ->depreciate it
-2008-12-18 01:03:01.195: debug: ->activate published key 10643
-2008-12-18 01:03:01.195: notice: "dyn.example.net.": lifetime of zone signing key 1355 exceeded: ZSK rollover done
-2008-12-18 01:03:01.196: debug: Re-signing necessary: Modfied zone key set
-2008-12-18 01:03:01.196: notice: "dyn.example.net.": re-signing triggered: Modfied zone key set
-2008-12-18 01:03:01.196: debug: Writing key file "./dyn.example.net/dnskey.db"
-2008-12-18 01:03:01.196: debug: Signing zone "dyn.example.net."
-2008-12-18 01:03:01.196: notice: "dyn.example.net.": freeze dynamic zone
-2008-12-18 01:03:01.196: debug: freeze dynamic zone "dyn.example.net."
-2008-12-18 01:03:01.197: debug: Run cmd "/usr/local/sbin/rndc freeze dyn.example.net."
-2008-12-18 01:03:01.628: debug: Dynamic Zone signing: copy old signed zone file ./dyn.example.net/zone.db.dsigned to new input file ./dyn.example.net/zone.db
-2008-12-18 01:03:01.653: debug: Run cmd "cd ./dyn.example.net; /usr/local/sbin/dnssec-signzone -g -p -d ../keysets -o dyn.example.net. -e +518400 -N increment -f zone.db.dsigned zone.db K*.private"
-2008-12-18 01:03:01.792: debug: Cmd dnssec-signzone return: "zone.db.dsigned"
-2008-12-18 01:03:01.792: notice: "dyn.example.net.": thaw dynamic zone
-2008-12-18 01:03:01.792: debug: thaw dynamic zone "dyn.example.net."
-2008-12-18 01:03:01.792: debug: Run cmd "/usr/local/sbin/rndc thaw dyn.example.net."
-2008-12-18 01:03:01.802: debug: Signing completed after 0s.
-2008-12-18 01:03:01.802: debug:
-2008-12-18 01:03:01.802: notice: end of run: 0 errors occured
-2008-12-28 23:06:27.762: notice: ------------------------------------------------------------
-2008-12-28 23:06:27.762: notice: running ../../dnssec-signer -v -v
-2008-12-28 23:06:27.764: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2008-12-28 23:06:27.765: debug: Check RFC5011 status
-2008-12-28 23:06:27.765: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2008-12-28 23:06:27.765: debug: Check KSK status
-2008-12-28 23:06:27.765: debug: Check ZSK status
-2008-12-28 23:06:27.765: debug: Lifetime(259200 +/-150 sec) of active key 22440 exceeded (1067698 sec)
-2008-12-28 23:06:27.765: debug: ->depreciate it
-2008-12-28 23:06:27.766: debug: ->activate published key 5823
-2008-12-28 23:06:27.766: notice: "sub.example.net.": lifetime of zone signing key 22440 exceeded: ZSK rollover done
-2008-12-28 23:06:27.766: debug: New key for publishing needed
-2008-12-28 23:06:28.696: debug: ->creating new key 4710
-2008-12-28 23:06:28.696: info: "sub.example.net.": new key 4710 generated for publishing
-2008-12-28 23:06:28.696: debug: Re-signing necessary: Modfied zone key set
-2008-12-28 23:06:28.696: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
-2008-12-28 23:06:28.696: debug: Writing key file "./sub.example.net/dnskey.db"
-2008-12-28 23:06:28.697: debug: Signing zone "sub.example.net."
-2008-12-28 23:06:28.697: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -3 B9D9AA -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2008-12-28 23:06:28.804: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2008-12-28 23:06:28.804: debug: Signing completed after 0s.
-2008-12-28 23:06:28.804: debug:
-2008-12-28 23:06:28.804: debug: parsing zone "example.net." in dir "./example.net"
-2008-12-28 23:06:28.804: debug: Check RFC5011 status
-2008-12-28 23:06:28.804: debug: Check ZSK status
-2008-12-28 23:06:28.804: debug: Re-signing necessary: re-signing interval (2d) reached
-2008-12-28 23:06:28.804: notice: "example.net.": re-signing triggered: re-signing interval (2d) reached
-2008-12-28 23:06:28.804: debug: Writing key file "./example.net/dnskey.db"
-2008-12-28 23:06:28.805: debug: Incrementing serial number in file "./example.net/zone.db"
-2008-12-28 23:06:28.805: debug: Signing zone "example.net."
-2008-12-28 23:06:28.805: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private"
-2008-12-28 23:06:28.898: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2008-12-28 23:06:28.898: debug: Signing completed after 0s.
-2008-12-28 23:06:28.898: debug:
-2008-12-28 23:06:28.899: notice: end of run: 0 errors occured
-2008-12-28 23:07:39.896: notice: ------------------------------------------------------------
-2008-12-28 23:07:39.896: notice: running ../../dnssec-signer -v -v -N named.conf
-2008-12-28 23:07:39.899: debug: parsing zone "sub.example.net." in dir "././sub.example.net"
-2008-12-28 23:07:39.899: debug: Check RFC5011 status
-2008-12-28 23:07:39.899: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2008-12-28 23:07:39.899: debug: Check KSK status
-2008-12-28 23:07:39.899: debug: Check ZSK status
-2008-12-28 23:07:39.899: debug: Re-signing not necessary!
-2008-12-28 23:07:39.899: debug: Check if there is a parent file to copy
-2008-12-28 23:07:39.899: debug:
-2008-12-28 23:07:39.899: debug: parsing zone "example.net." in dir "././example.net"
-2008-12-28 23:07:39.899: debug: Check RFC5011 status
-2008-12-28 23:07:39.899: debug: Check ZSK status
-2008-12-28 23:07:39.899: debug: Re-signing not necessary!
-2008-12-28 23:07:39.899: debug: Check if there is a parent file to copy
-2008-12-28 23:07:39.899: debug:
-2008-12-28 23:07:39.899: notice: end of run: 0 errors occured
-2008-12-28 23:08:02.141: notice: ------------------------------------------------------------
-2008-12-28 23:08:02.141: notice: running ../../dnssec-signer -f -v -v -N named.conf
-2008-12-28 23:08:02.143: debug: parsing zone "sub.example.net." in dir "././sub.example.net"
-2008-12-28 23:08:02.143: debug: Check RFC5011 status
-2008-12-28 23:08:02.143: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2008-12-28 23:08:02.143: debug: Check KSK status
-2008-12-28 23:08:02.143: debug: Check ZSK status
-2008-12-28 23:08:02.143: debug: Re-signing necessary: Option -f
-2008-12-28 23:08:02.143: notice: "sub.example.net.": re-signing triggered: Option -f
-2008-12-28 23:08:02.143: debug: Writing key file "././sub.example.net/dnskey.db"
-2008-12-28 23:08:02.144: debug: Signing zone "sub.example.net."
-2008-12-28 23:08:02.144: debug: Run cmd "cd ././sub.example.net; /usr/local/sbin/dnssec-signzone -3 B5EA98 -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2008-12-28 23:08:02.266: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2008-12-28 23:08:02.266: debug: Signing completed after 0s.
-2008-12-28 23:08:02.266: debug:
-2008-12-28 23:08:02.266: debug: parsing zone "example.net." in dir "././example.net"
-2008-12-28 23:08:02.266: debug: Check RFC5011 status
-2008-12-28 23:08:02.266: debug: Check ZSK status
-2008-12-28 23:08:02.266: debug: Re-signing necessary: Option -f
-2008-12-28 23:08:02.266: notice: "example.net.": re-signing triggered: Option -f
-2008-12-28 23:08:02.266: debug: Writing key file "././example.net/dnskey.db"
-2008-12-28 23:08:02.267: debug: Incrementing serial number in file "././example.net/zone.db"
-2008-12-28 23:08:02.267: debug: Signing zone "example.net."
-2008-12-28 23:08:02.267: debug: Run cmd "cd ././example.net; /usr/local/sbin/dnssec-signzone -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private"
-2008-12-28 23:08:02.534: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2008-12-28 23:08:02.534: debug: Signing completed after 0s.
-2008-12-28 23:08:02.534: debug:
-2008-12-28 23:08:02.534: notice: end of run: 0 errors occured
-2009-02-28 12:31:26.082: notice: ------------------------------------------------------------
-2009-02-28 12:31:26.083: notice: running ../../dnssec-signer -N named.conf
-2009-02-28 12:31:26.100: debug: parsing zone "sub.example.net." in dir "././sub.example.net"
-2009-02-28 12:31:26.100: debug: Check RFC5011 status
-2009-02-28 12:31:26.100: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-02-28 12:31:26.100: debug: Check KSK status
-2009-02-28 12:31:26.100: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 1d12h35m58s
-2009-02-28 12:31:26.100: debug: Check ZSK status
-2009-02-28 12:31:26.100: debug: Lifetime(390 sec) of depreciated key 22440 exceeded (5315758 sec)
-2009-02-28 12:31:26.100: info: "sub.example.net.": old ZSK 22440 removed
-2009-02-28 12:31:26.101: debug: ->remove it
-2009-02-28 12:31:26.101: debug: Lifetime(259200 +/-150 sec) of active key 5823 exceeded (5315758 sec)
-2009-02-28 12:31:26.101: debug: ->depreciate it
-2009-02-28 12:31:26.101: debug: ->activate published key 4710
-2009-02-28 12:31:26.101: notice: "sub.example.net.": lifetime of zone signing key 5823 exceeded: ZSK rollover done
-2009-02-28 12:31:26.101: debug: New key for publishing needed
-2009-02-28 12:31:28.559: debug: ->creating new key 32820
-2009-02-28 12:31:28.559: info: "sub.example.net.": new key 32820 generated for publishing
-2009-02-28 12:31:28.559: debug: Re-signing necessary: Modfied zone key set
-2009-02-28 12:31:28.560: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
-2009-02-28 12:31:28.560: debug: Writing key file "././sub.example.net/dnskey.db"
-2009-02-28 12:31:28.560: debug: Signing zone "sub.example.net."
-2009-02-28 12:31:28.560: debug: Run cmd "cd ././sub.example.net; /usr/local/sbin/dnssec-signzone -3 FC6C7C -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-02-28 12:31:28.803: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-02-28 12:31:28.803: debug: Signing completed after 0s.
-2009-02-28 12:31:28.803: debug:
-2009-02-28 12:31:28.803: debug: parsing zone "example.net." in dir "././example.net"
-2009-02-28 12:31:28.803: debug: Check RFC5011 status
-2009-02-28 12:31:28.803: notice: "example.net.": starting rfc5011 rollover
-2009-02-28 12:31:28.803: debug: Lifetime of Key Signing Key 1764 exceeded (8w5d12h36m): Starting rfc5011 rollover!
-2009-02-28 12:31:28.803: debug: =>Generating new standby key signing key
-2009-02-28 12:31:29.067: info: "example.net.": generated new standby KSK 33840
-2009-02-28 12:31:29.067: debug: =>Activating old standby key 7308
-2009-02-28 12:31:29.068: debug: =>Revoking old active key 1764
-2009-02-28 12:31:29.068: debug: Check ZSK status
-2009-02-28 12:31:29.068: debug: Re-signing necessary: Modfied zone key set
-2009-02-28 12:31:29.068: notice: "example.net.": re-signing triggered: Modfied zone key set
-2009-02-28 12:31:29.068: debug: Writing key file "././example.net/dnskey.db"
-2009-02-28 12:31:29.069: debug: Incrementing serial number in file "././example.net/zone.db"
-2009-02-28 12:31:29.069: debug: Signing zone "example.net."
-2009-02-28 12:31:29.069: debug: Run cmd "cd ././example.net; /usr/local/sbin/dnssec-signzone -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private"
-2009-02-28 12:31:29.206: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-02-28 12:31:29.206: debug: Signing completed after 0s.
-2009-02-28 12:31:29.206: debug:
-2009-02-28 12:31:29.206: notice: end of run: 0 errors occured
-2009-02-28 12:31:34.121: notice: ------------------------------------------------------------
-2009-02-28 12:31:34.121: notice: running ../../dnssec-signer -v -v -N named.conf
-2009-02-28 12:31:34.126: debug: parsing zone "sub.example.net." in dir "././sub.example.net"
-2009-02-28 12:31:34.126: debug: Check RFC5011 status
-2009-02-28 12:31:34.126: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-02-28 12:31:34.126: debug: Check KSK status
-2009-02-28 12:31:34.126: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 1d12h36m6s
-2009-02-28 12:31:34.126: debug: Check ZSK status
-2009-02-28 12:31:34.126: debug: Re-signing not necessary!
-2009-02-28 12:31:34.126: debug: Check if there is a parent file to copy
-2009-02-28 12:31:34.126: debug:
-2009-02-28 12:31:34.126: debug: parsing zone "example.net." in dir "././example.net"
-2009-02-28 12:31:34.126: debug: Check RFC5011 status
-2009-02-28 12:31:34.126: debug: zone "example.net.": found revoked key with exptime of: Feb 28 2009 12:31:28
-2009-02-28 12:31:34.126: debug: Check ZSK status
-2009-02-28 12:31:34.126: debug: Re-signing not necessary!
-2009-02-28 12:31:34.126: debug: Check if there is a parent file to copy
-2009-02-28 12:31:34.126: debug:
-2009-02-28 12:31:34.126: notice: end of run: 0 errors occured
-2009-02-28 12:32:49.522: notice: ------------------------------------------------------------
-2009-02-28 12:32:49.522: notice: running ../../dnssec-signer -v -v -N named.conf
-2009-02-28 12:32:49.525: debug: parsing zone "sub.example.net." in dir "././sub.example.net"
-2009-02-28 12:32:49.525: debug: Check RFC5011 status
-2009-02-28 12:32:49.525: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-02-28 12:32:49.525: debug: Check KSK status
-2009-02-28 12:32:49.525: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 1d12h37m21s
-2009-02-28 12:32:49.525: debug: Check ZSK status
-2009-02-28 12:32:49.526: debug: Re-signing not necessary!
-2009-02-28 12:32:49.526: debug: Check if there is a parent file to copy
-2009-02-28 12:32:49.526: debug:
-2009-02-28 12:32:49.526: debug: parsing zone "example.net." in dir "././example.net"
-2009-02-28 12:32:49.526: debug: Check RFC5011 status
-2009-02-28 12:32:49.526: debug: zone "example.net.": found revoked key with exptime of: Feb 28 2009 12:31:28
-2009-02-28 12:32:49.526: debug: Check ZSK status
-2009-02-28 12:32:49.526: debug: Re-signing not necessary!
-2009-02-28 12:32:49.526: debug: Check if there is a parent file to copy
-2009-02-28 12:32:49.527: debug:
-2009-02-28 12:32:49.527: notice: end of run: 0 errors occured
-2009-02-28 12:42:47.999: notice: ------------------------------------------------------------
-2009-02-28 12:42:48.000: notice: running ../../dnssec-signer -v -v -N named.conf
-2009-02-28 12:45:56.491: notice: ------------------------------------------------------------
-2009-02-28 12:45:56.491: notice: running ../../dnssec-signer -v -v -N named.conf
-2009-02-28 12:50:13.057: notice: ------------------------------------------------------------
-2009-02-28 12:50:13.057: notice: running ../../dnssec-signer -v -v -N named.conf
-2009-02-28 12:50:54.700: notice: ------------------------------------------------------------
-2009-02-28 12:50:54.700: notice: running ../../dnssec-signer -v -v -N named.conf
-2009-02-28 12:52:23.926: notice: ------------------------------------------------------------
-2009-02-28 12:52:23.926: notice: running ../../dnssec-signer -v -v -N named.conf
-2009-02-28 12:52:23.933: debug: parsing zone "sub.example.net." in dir "././sub.example.net"
-2009-02-28 12:52:23.934: debug: Check RFC5011 status
-2009-02-28 12:52:23.934: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-02-28 12:52:23.934: debug: Check KSK status
-2009-02-28 12:52:23.934: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 1d12h56m55s
-2009-02-28 12:52:23.934: debug: Check ZSK status
-2009-02-28 12:52:23.934: debug: Lifetime(390 sec) of depreciated key 5823 exceeded (1257 sec)
-2009-02-28 12:52:23.934: info: "sub.example.net.": old ZSK 5823 removed
-2009-02-28 12:52:23.934: debug: ->remove it
-2009-02-28 12:52:23.934: debug: Re-signing necessary: Modfied zone key set
-2009-02-28 12:52:23.934: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
-2009-02-28 12:52:23.934: debug: Writing key file "././sub.example.net/dnskey.db"
-2009-02-28 12:52:23.935: debug: Signing zone "sub.example.net."
-2009-02-28 12:52:23.935: debug: Run cmd "cd ././sub.example.net; /usr/local/sbin/dnssec-signzone -3 A4756D -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-02-28 12:52:24.701: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-02-28 12:52:24.701: debug: Signing completed after 1s.
-2009-02-28 12:52:24.701: debug:
-2009-02-28 12:52:24.701: debug: parsing zone "example.net." in dir "././example.net"
-2009-02-28 12:52:24.701: debug: Check RFC5011 status
-2009-02-28 12:52:24.701: debug: zone "example.net.": found revoked key with exptime of: Feb 28 2009 12:31:28
-2009-02-28 12:52:24.701: debug: Check ZSK status
-2009-02-28 12:52:24.701: debug: Re-signing not necessary!
-2009-02-28 12:52:24.701: debug: Check if there is a parent file to copy
-2009-02-28 12:52:24.701: debug:
-2009-02-28 12:52:24.701: notice: end of run: 0 errors occured
-2009-02-28 12:53:08.325: notice: ------------------------------------------------------------
-2009-02-28 12:53:08.325: notice: running ../../dnssec-signer -v -v -N named.conf
-2009-02-28 12:53:48.858: notice: ------------------------------------------------------------
-2009-02-28 12:53:48.858: notice: running ../../dnssec-signer -v -v -N named.conf
-2009-02-28 12:54:09.878: notice: ------------------------------------------------------------
-2009-02-28 12:54:09.878: notice: running ../../dnssec-signer -v -v -N named.conf
-2009-02-28 12:54:09.885: debug: parsing zone "sub.example.net." in dir "/home/hoz/share/named/dnssec-signer/zkt-0.99/examples/flat/./sub.example.net"
-2009-02-28 12:54:09.885: debug: Check RFC5011 status
-2009-02-28 12:54:09.885: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-02-28 12:54:09.885: debug: Check KSK status
-2009-02-28 12:54:09.886: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 1d12h58m41s
-2009-02-28 12:54:09.886: debug: Check ZSK status
-2009-02-28 12:54:09.886: debug: Re-signing not necessary!
-2009-02-28 12:54:09.886: debug: Check if there is a parent file to copy
-2009-02-28 12:54:09.886: debug:
-2009-02-28 12:54:09.886: debug: parsing zone "example.net." in dir "/home/hoz/share/named/dnssec-signer/zkt-0.99/examples/flat/./example.net"
-2009-02-28 12:54:09.886: debug: Check RFC5011 status
-2009-02-28 12:54:09.886: debug: zone "example.net.": found revoked key with exptime of: Feb 28 2009 12:31:28
-2009-02-28 12:54:09.886: debug: Check ZSK status
-2009-02-28 12:54:09.886: debug: Re-signing not necessary!
-2009-02-28 12:54:09.886: debug: Check if there is a parent file to copy
-2009-02-28 12:54:09.886: debug:
-2009-02-28 12:54:09.886: notice: end of run: 0 errors occured
-2009-02-28 12:55:02.579: notice: ------------------------------------------------------------
-2009-02-28 12:55:02.579: notice: running ../../dnssec-signer -v -v -N named.conf
-2009-03-03 19:13:47.524: notice: ------------------------------------------------------------
-2009-03-03 19:13:47.524: notice: running ../../dnssec-signer -v -v -N named.conf
-2009-03-03 19:13:47.532: debug: parsing zone "sub.example.net." in dir "/home/hoz/share/named/dnssec-signer/zkt-0.99/examples/flat/./sub.example.net"
-2009-03-03 19:13:47.532: debug: Check RFC5011 status
-2009-03-03 19:13:47.532: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-03-03 19:13:47.532: debug: Check KSK status
-2009-03-03 19:13:47.533: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 4d19h18m19s
-2009-03-03 19:13:47.533: debug: Check ZSK status
-2009-03-03 19:13:47.533: debug: Lifetime(259200 +/-150 sec) of active key 4710 exceeded (283341 sec)
-2009-03-03 19:13:47.533: debug: ->depreciate it
-2009-03-03 19:13:47.533: debug: ->activate published key 32820
-2009-03-03 19:13:47.533: notice: "sub.example.net.": lifetime of zone signing key 4710 exceeded: ZSK rollover done
-2009-03-03 19:13:47.533: debug: New key for publishing needed
-2009-03-03 19:13:48.366: debug: ->creating new key 49656
-2009-03-03 19:13:48.366: info: "sub.example.net.": new key 49656 generated for publishing
-2009-03-03 19:13:48.366: debug: Re-signing necessary: Modfied zone key set
-2009-03-03 19:13:48.366: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
-2009-03-03 19:13:48.367: debug: Writing key file "/home/hoz/share/named/dnssec-signer/zkt-0.99/examples/flat/./sub.example.net/dnskey.db"
-2009-03-03 19:13:48.367: debug: Signing zone "sub.example.net."
-2009-03-03 19:13:48.367: debug: Run cmd "cd /home/hoz/share/named/dnssec-signer/zkt-0.99/examples/flat/./sub.example.net; /usr/local/sbin/dnssec-signzone -3 BCB121 -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-03-03 19:13:48.543: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-03-03 19:13:48.543: debug: Signing completed after 0s.
-2009-03-03 19:13:48.543: debug:
-2009-03-03 19:13:48.543: debug: parsing zone "example.net." in dir "/home/hoz/share/named/dnssec-signer/zkt-0.99/examples/flat/./example.net"
-2009-03-03 19:13:48.543: debug: Check RFC5011 status
-2009-03-03 19:13:48.543: debug: zone "example.net.": found revoked key with exptime of: Feb 28 2009 12:31:28
-2009-03-03 19:13:48.543: debug: Check ZSK status
-2009-03-03 19:13:48.543: debug: Re-signing necessary: re-signing interval (2d) reached
-2009-03-03 19:13:48.543: notice: "example.net.": re-signing triggered: re-signing interval (2d) reached
-2009-03-03 19:13:48.543: debug: Writing key file "/home/hoz/share/named/dnssec-signer/zkt-0.99/examples/flat/./example.net/dnskey.db"
-2009-03-03 19:13:48.544: debug: Incrementing serial number in file "/home/hoz/share/named/dnssec-signer/zkt-0.99/examples/flat/./example.net/zone.db"
-2009-03-03 19:13:48.544: debug: Signing zone "example.net."
-2009-03-03 19:13:48.544: debug: Run cmd "cd /home/hoz/share/named/dnssec-signer/zkt-0.99/examples/flat/./example.net; /usr/local/sbin/dnssec-signzone -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private"
-2009-03-03 19:13:48.723: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-03-03 19:13:48.723: debug: Signing completed after 0s.
-2009-03-03 19:13:48.723: debug:
-2009-03-03 19:13:48.724: notice: end of run: 0 errors occured
-2009-03-03 19:14:16.121: notice: ------------------------------------------------------------
-2009-03-03 19:14:16.121: notice: running ../../dnssec-signer -O namedchrootdir: /var/named -v -v -N named.conf
-2009-03-03 19:14:30.231: notice: ------------------------------------------------------------
-2009-03-03 19:14:30.231: notice: running ../../dnssec-signer -O namedchrootdir: . -v -v -N named.conf
-2009-03-03 19:15:37.851: notice: ------------------------------------------------------------
-2009-03-03 19:15:37.851: notice: running ../../dnssec-signer -O namedchrootdir: . -v -v -N named.conf
-2009-03-03 19:15:37.853: debug: parsing zone "sub.example.net." in dir "./././sub.example.net"
-2009-03-03 19:15:37.853: debug: Check RFC5011 status
-2009-03-03 19:15:37.853: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-03-03 19:15:37.853: debug: Check KSK status
-2009-03-03 19:15:37.853: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 4d19h20m9s
-2009-03-03 19:15:37.853: debug: Check ZSK status
-2009-03-03 19:15:37.853: debug: Re-signing not necessary!
-2009-03-03 19:15:37.853: debug: Check if there is a parent file to copy
-2009-03-03 19:15:37.853: debug:
-2009-03-03 19:15:37.853: debug: parsing zone "example.net." in dir "./././example.net"
-2009-03-03 19:15:37.853: debug: Check RFC5011 status
-2009-03-03 19:15:37.853: debug: zone "example.net.": found revoked key with exptime of: Feb 28 2009 12:31:28
-2009-03-03 19:15:37.853: debug: Check ZSK status
-2009-03-03 19:15:37.853: debug: Re-signing not necessary!
-2009-03-03 19:15:37.853: debug: Check if there is a parent file to copy
-2009-03-03 19:15:37.853: debug:
-2009-03-03 19:15:37.853: notice: end of run: 0 errors occured
-2009-03-03 19:15:44.219: notice: ------------------------------------------------------------
-2009-03-03 19:15:44.219: notice: running ../../dnssec-signer -O namedchrootdir: /var/named -v -v -N named.conf
-2009-03-03 19:15:49.305: notice: ------------------------------------------------------------
-2009-03-03 19:15:49.305: notice: running ../../dnssec-signer -v -v -N named.conf
-2009-03-03 19:15:49.308: debug: parsing zone "sub.example.net." in dir "././sub.example.net"
-2009-03-03 19:15:49.308: debug: Check RFC5011 status
-2009-03-03 19:15:49.308: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-03-03 19:15:49.308: debug: Check KSK status
-2009-03-03 19:15:49.309: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 4d19h20m21s
-2009-03-03 19:15:49.309: debug: Check ZSK status
-2009-03-03 19:15:49.309: debug: Re-signing not necessary!
-2009-03-03 19:15:49.309: debug: Check if there is a parent file to copy
-2009-03-03 19:15:49.309: debug:
-2009-03-03 19:15:49.309: debug: parsing zone "example.net." in dir "././example.net"
-2009-03-03 19:15:49.310: debug: Check RFC5011 status
-2009-03-03 19:15:49.310: debug: zone "example.net.": found revoked key with exptime of: Feb 28 2009 12:31:28
-2009-03-03 19:15:49.310: debug: Check ZSK status
-2009-03-03 19:15:49.310: debug: Re-signing not necessary!
-2009-03-03 19:15:49.310: debug: Check if there is a parent file to copy
-2009-03-03 19:15:49.310: debug:
-2009-03-03 19:15:49.310: notice: end of run: 0 errors occured
-2009-03-04 18:07:38.441: notice: ------------------------------------------------------------
-2009-03-04 18:07:38.441: notice: running ../../dnssec-signer -v -v -N named.conf
-2009-03-04 18:07:38.459: debug: parsing zone "sub.example.net." in dir "././sub.example.net"
-2009-03-04 18:07:38.459: debug: Check RFC5011 status
-2009-03-04 18:07:38.459: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-03-04 18:07:38.459: debug: Check KSK status
-2009-03-04 18:07:38.459: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 5d18h12m10s
-2009-03-04 18:07:38.459: debug: Check ZSK status
-2009-03-04 18:07:38.459: debug: Lifetime(390 sec) of depreciated key 4710 exceeded (82431 sec)
-2009-03-04 18:07:38.459: info: "sub.example.net.": old ZSK 4710 removed
-2009-03-04 18:07:38.459: debug: ->remove it
-2009-03-04 18:07:38.459: debug: Re-signing necessary: Modfied zone key set
-2009-03-04 18:07:38.459: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
-2009-03-04 18:07:38.459: debug: Writing key file "././sub.example.net/dnskey.db"
-2009-03-04 18:07:38.460: debug: Signing zone "sub.example.net."
-2009-03-04 18:07:38.460: debug: Run cmd "cd ././sub.example.net; /usr/local/sbin/dnssec-signzone -n 0 -3 33B698 -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-03-04 18:07:38.635: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-03-04 18:07:38.635: debug: Signing completed after 0s.
-2009-03-04 18:07:38.635: debug:
-2009-03-04 18:07:38.635: debug: parsing zone "example.net." in dir "././example.net"
-2009-03-04 18:07:38.635: debug: Check RFC5011 status
-2009-03-04 18:07:38.635: debug: zone "example.net.": found revoked key (id=1764 exptime=Feb 28 2009 12:31:28); waiting for remove hold down time
-2009-03-04 18:07:38.636: debug: Check ZSK status
-2009-03-04 18:07:38.636: debug: Re-signing not necessary!
-2009-03-04 18:07:38.636: debug: Check if there is a parent file to copy
-2009-03-04 18:07:38.636: debug:
-2009-03-04 18:07:38.636: notice: end of run: 0 errors occured
-2009-03-04 18:07:54.353: notice: ------------------------------------------------------------
-2009-03-04 18:07:54.353: notice: running ../../dnssec-signer -r -v -v -N named.conf
-2009-03-04 18:07:54.357: debug: parsing zone "sub.example.net." in dir "././sub.example.net"
-2009-03-04 18:07:54.357: debug: Check RFC5011 status
-2009-03-04 18:07:54.357: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-03-04 18:07:54.357: debug: Check KSK status
-2009-03-04 18:07:54.357: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 5d18h12m26s
-2009-03-04 18:07:54.357: debug: Check ZSK status
-2009-03-04 18:07:54.357: debug: Re-signing not necessary!
-2009-03-04 18:07:54.357: debug: Check if there is a parent file to copy
-2009-03-04 18:07:54.357: debug:
-2009-03-04 18:07:54.357: debug: parsing zone "example.net." in dir "././example.net"
-2009-03-04 18:07:54.357: debug: Check RFC5011 status
-2009-03-04 18:07:54.357: debug: zone "example.net.": found revoked key (id=1764 exptime=Feb 28 2009 12:31:28); waiting for remove hold down time
-2009-03-04 18:07:54.358: debug: Check ZSK status
-2009-03-04 18:07:54.358: debug: Re-signing not necessary!
-2009-03-04 18:07:54.358: debug: Check if there is a parent file to copy
-2009-03-04 18:07:54.358: debug:
-2009-03-04 18:07:54.358: notice: end of run: 0 errors occured
-2009-03-04 18:08:25.210: notice: ------------------------------------------------------------
-2009-03-04 18:08:25.210: notice: running ../../dnssec-signer -r -v -v -N named.conf
-2009-03-04 18:08:25.212: debug: parsing zone "sub.example.net." in dir "././sub.example.net"
-2009-03-04 18:08:25.212: debug: Check RFC5011 status
-2009-03-04 18:08:25.213: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-03-04 18:08:25.213: debug: Check KSK status
-2009-03-04 18:08:25.213: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 5d18h12m57s
-2009-03-04 18:08:25.213: debug: Check ZSK status
-2009-03-04 18:08:25.213: debug: Re-signing not necessary!
-2009-03-04 18:08:25.213: debug: Check if there is a parent file to copy
-2009-03-04 18:08:25.213: debug:
-2009-03-04 18:08:25.214: debug: parsing zone "example.net." in dir "././example.net"
-2009-03-04 18:08:25.214: debug: Check RFC5011 status
-2009-03-04 18:08:25.214: debug: zone "example.net.": found revoked key (id=1764 exptime=Feb 28 2009 12:31:28); waiting for remove hold down time
-2009-03-04 18:08:25.214: debug: Check ZSK status
-2009-03-04 18:08:25.214: debug: Re-signing not necessary!
-2009-03-04 18:08:25.214: debug: Check if there is a parent file to copy
-2009-03-04 18:08:25.214: debug:
-2009-03-04 18:08:25.216: notice: end of run: 0 errors occured
-2009-03-04 18:08:32.379: notice: ------------------------------------------------------------
-2009-03-04 18:08:32.379: notice: running ../../dnssec-signer -f -v -v -N named.conf
-2009-03-04 18:08:32.381: debug: parsing zone "sub.example.net." in dir "././sub.example.net"
-2009-03-04 18:08:32.381: debug: Check RFC5011 status
-2009-03-04 18:08:32.381: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-03-04 18:08:32.381: debug: Check KSK status
-2009-03-04 18:08:32.381: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 5d18h13m4s
-2009-03-04 18:08:32.381: debug: Check ZSK status
-2009-03-04 18:08:32.381: debug: Re-signing necessary: Option -f
-2009-03-04 18:08:32.381: notice: "sub.example.net.": re-signing triggered: Option -f
-2009-03-04 18:08:32.381: debug: Writing key file "././sub.example.net/dnskey.db"
-2009-03-04 18:08:32.382: debug: Signing zone "sub.example.net."
-2009-03-04 18:08:32.382: debug: Run cmd "cd ././sub.example.net; /usr/local/sbin/dnssec-signzone -n 2 -3 A0BEB8 -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-03-04 18:08:32.896: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-03-04 18:08:32.896: debug: Signing completed after 0s.
-2009-03-04 18:08:32.896: debug:
-2009-03-04 18:08:32.896: debug: parsing zone "example.net." in dir "././example.net"
-2009-03-04 18:08:32.896: debug: Check RFC5011 status
-2009-03-04 18:08:32.896: debug: zone "example.net.": found revoked key (id=1764 exptime=Feb 28 2009 12:31:28); waiting for remove hold down time
-2009-03-04 18:08:32.896: debug: Check ZSK status
-2009-03-04 18:08:32.896: debug: Re-signing necessary: Option -f
-2009-03-04 18:08:32.896: notice: "example.net.": re-signing triggered: Option -f
-2009-03-04 18:08:32.896: debug: Writing key file "././example.net/dnskey.db"
-2009-03-04 18:08:32.897: debug: Incrementing serial number in file "././example.net/zone.db"
-2009-03-04 18:08:32.897: debug: Signing zone "example.net."
-2009-03-04 18:08:32.897: debug: Run cmd "cd ././example.net; /usr/local/sbin/dnssec-signzone -n 2 -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private"
-2009-03-04 18:08:33.042: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-03-04 18:08:33.042: debug: Signing completed after 1s.
-2009-03-04 18:08:33.042: debug:
-2009-03-04 18:08:33.043: notice: end of run: 0 errors occured
-2009-03-04 18:08:46.381: notice: ------------------------------------------------------------
-2009-03-04 18:08:46.381: notice: running ../../dnssec-signer -f -v -v -N named.conf
-2009-03-04 18:08:46.385: debug: parsing zone "sub.example.net." in dir "././sub.example.net"
-2009-03-04 18:08:46.385: debug: Check RFC5011 status
-2009-03-04 18:08:46.385: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-03-04 18:08:46.385: debug: Check KSK status
-2009-03-04 18:08:46.385: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 5d18h13m18s
-2009-03-04 18:08:46.385: debug: Check ZSK status
-2009-03-04 18:08:46.385: debug: Re-signing necessary: Option -f
-2009-03-04 18:08:46.385: notice: "sub.example.net.": re-signing triggered: Option -f
-2009-03-04 18:08:46.385: debug: Writing key file "././sub.example.net/dnskey.db"
-2009-03-04 18:08:46.386: debug: Signing zone "sub.example.net."
-2009-03-04 18:08:46.386: debug: Run cmd "cd ././sub.example.net; /usr/local/sbin/dnssec-signzone -n 0 -3 1864E1 -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-03-04 18:08:46.990: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-03-04 18:08:46.991: debug: Signing completed after 0s.
-2009-03-04 18:08:46.991: debug:
-2009-03-04 18:08:46.991: debug: parsing zone "example.net." in dir "././example.net"
-2009-03-04 18:08:46.991: debug: Check RFC5011 status
-2009-03-04 18:08:46.991: debug: zone "example.net.": found revoked key (id=1764 exptime=Feb 28 2009 12:31:28); waiting for remove hold down time
-2009-03-04 18:08:46.991: debug: Check ZSK status
-2009-03-04 18:08:46.991: debug: Re-signing necessary: Option -f
-2009-03-04 18:08:46.991: notice: "example.net.": re-signing triggered: Option -f
-2009-03-04 18:08:46.991: debug: Writing key file "././example.net/dnskey.db"
-2009-03-04 18:08:46.992: debug: Incrementing serial number in file "././example.net/zone.db"
-2009-03-04 18:08:46.992: debug: Signing zone "example.net."
-2009-03-04 18:08:46.993: debug: Run cmd "cd ././example.net; /usr/local/sbin/dnssec-signzone -n 0 -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private"
-2009-03-04 18:08:47.149: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-03-04 18:08:47.149: debug: Signing completed after 1s.
-2009-03-04 18:08:47.149: debug:
-2009-03-04 18:08:47.149: notice: end of run: 0 errors occured
-2009-03-04 18:08:59.141: notice: ------------------------------------------------------------
-2009-03-04 18:08:59.141: notice: running ../../dnssec-signer -f -v -v -N named.conf
-2009-03-04 18:08:59.145: debug: parsing zone "sub.example.net." in dir "././sub.example.net"
-2009-03-04 18:08:59.145: debug: Check RFC5011 status
-2009-03-04 18:08:59.145: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-03-04 18:08:59.145: debug: Check KSK status
-2009-03-04 18:08:59.145: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 5d18h13m31s
-2009-03-04 18:08:59.145: debug: Check ZSK status
-2009-03-04 18:08:59.145: debug: Re-signing necessary: Option -f
-2009-03-04 18:08:59.146: notice: "sub.example.net.": re-signing triggered: Option -f
-2009-03-04 18:08:59.146: debug: Writing key file "././sub.example.net/dnskey.db"
-2009-03-04 18:08:59.146: debug: Signing zone "sub.example.net."
-2009-03-04 18:08:59.146: debug: Run cmd "cd ././sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 945691 -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-03-04 18:09:00.082: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-03-04 18:09:00.082: debug: Signing completed after 1s.
-2009-03-04 18:09:00.082: debug:
-2009-03-04 18:09:00.083: debug: parsing zone "example.net." in dir "././example.net"
-2009-03-04 18:09:00.083: debug: Check RFC5011 status
-2009-03-04 18:09:00.083: debug: zone "example.net.": found revoked key (id=1764 exptime=Feb 28 2009 12:31:28); waiting for remove hold down time
-2009-03-04 18:09:00.083: debug: Check ZSK status
-2009-03-04 18:09:00.083: debug: Re-signing necessary: Option -f
-2009-03-04 18:09:00.083: notice: "example.net.": re-signing triggered: Option -f
-2009-03-04 18:09:00.083: debug: Writing key file "././example.net/dnskey.db"
-2009-03-04 18:09:00.084: debug: Incrementing serial number in file "././example.net/zone.db"
-2009-03-04 18:09:00.084: debug: Signing zone "example.net."
-2009-03-04 18:09:00.084: debug: Run cmd "cd ././example.net; /usr/local/sbin/dnssec-signzone -n 1 -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private"
-2009-03-04 18:09:00.238: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-03-04 18:09:00.238: debug: Signing completed after 0s.
-2009-03-04 18:09:00.238: debug:
-2009-03-04 18:09:00.238: notice: end of run: 0 errors occured
-2009-06-15 09:58:41.205: notice: ------------------------------------------------------------
-2009-06-15 09:58:41.205: notice: running ../../dnssec-signer -v -v
-2009-06-15 09:58:41.226: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-15 09:58:41.226: debug: Check RFC5011 status
-2009-06-15 09:58:41.226: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-15 09:58:41.226: debug: Check KSK status
-2009-06-15 09:58:41.227: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 15w3d9h3m13s
-2009-06-15 09:58:41.227: debug: Check ZSK status
-2009-06-15 09:58:41.227: debug: Lifetime(259200 +/-150 sec) of active key 32820 exceeded (8948694 sec)
-2009-06-15 09:58:41.227: debug: ->depreciate it
-2009-06-15 09:58:41.227: debug: ->activate published key 49656
-2009-06-15 09:58:41.227: notice: "sub.example.net.": lifetime of zone signing key 32820 exceeded: ZSK rollover done
-2009-06-15 09:58:41.227: debug: New key for publishing needed
-2009-06-15 09:58:41.346: debug: ->creating new key 37135
-2009-06-15 09:58:41.346: info: "sub.example.net.": new key 37135 generated for publishing
-2009-06-15 09:58:41.346: debug: Re-signing necessary: Modfied zone key set
-2009-06-15 09:58:41.346: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
-2009-06-15 09:58:41.346: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-15 09:58:41.346: debug: Signing zone "sub.example.net."
-2009-06-15 09:58:41.346: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 11D7FD -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-06-15 09:58:41.399: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-15 09:58:41.399: debug: Signing completed after 0s.
-2009-06-15 09:58:41.399: debug:
-2009-06-15 09:58:41.399: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-15 09:58:41.399: debug: Check RFC5011 status
-2009-06-15 09:58:41.399: debug: zone "example.net.": found revoked key (id=1764 exptime=Feb 28 2009 12:31:28); waiting for remove hold down time
-2009-06-15 09:58:41.399: debug: Remove revoked key 1764 which is older than 30 days
-2009-06-15 09:58:41.400: notice: zone "example.net.": removing revoked key 1764
-2009-06-15 09:58:41.400: debug: Check ZSK status
-2009-06-15 09:58:41.400: debug: Lifetime(7776000 +/-150 sec) of active key 4157 exceeded (14547793 sec)
-2009-06-15 09:58:41.400: debug: ->waiting for published key
-2009-06-15 09:58:41.400: notice: "example.net.": lifetime of zone signing key 4157 exceeded since 11w1d9h3m13s: ZSK rollover deferred: waiting for published key
-2009-06-15 09:58:41.400: debug: New key for publishing needed
-2009-06-15 09:58:41.499: debug: ->creating new key 34925
-2009-06-15 09:58:41.499: info: "example.net.": new key 34925 generated for publishing
-2009-06-15 09:58:41.499: debug: Re-signing necessary: Modfied zone key set
-2009-06-15 09:58:41.499: notice: "example.net.": re-signing triggered: Modfied zone key set
-2009-06-15 09:58:41.499: debug: Writing key file "./example.net/dnskey.db"
-2009-06-15 09:58:41.499: debug: Incrementing serial number in file "./example.net/zone.db"
-2009-06-15 09:58:41.499: debug: Signing zone "example.net."
-2009-06-15 09:58:41.499: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private"
-2009-06-15 09:58:41.543: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-15 09:58:41.543: debug: Signing completed after 0s.
-2009-06-15 09:58:41.543: debug:
-2009-06-15 09:58:41.543: notice: end of run: 0 errors occured
-2009-06-17 16:36:16.761: notice: ------------------------------------------------------------
-2009-06-17 16:36:16.761: notice: running ../../dnssec-signer -v -v
-2009-06-17 16:36:16.792: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-17 16:36:16.792: debug: Check RFC5011 status
-2009-06-17 16:36:16.792: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-17 16:36:16.792: debug: Check KSK status
-2009-06-17 16:36:16.792: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 15w5d15h40m48s
-2009-06-17 16:36:16.792: debug: Check ZSK status
-2009-06-17 16:36:16.792: debug: Lifetime(390 sec) of depreciated key 32820 exceeded (196655 sec)
-2009-06-17 16:36:16.792: info: "sub.example.net.": old ZSK 32820 removed
-2009-06-17 16:36:16.792: debug: ->remove it
-2009-06-17 16:36:16.792: debug: Re-signing necessary: Modfied zone key set
-2009-06-17 16:36:16.792: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
-2009-06-17 16:36:16.792: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-17 16:36:16.793: debug: Signing zone "sub.example.net."
-2009-06-17 16:36:16.793: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 4214E6 -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-06-17 16:36:16.984: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-17 16:36:16.984: debug: Signing completed after 0s.
-2009-06-17 16:36:16.984: debug:
-2009-06-17 16:36:16.984: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-17 16:36:16.984: debug: Check RFC5011 status
-2009-06-17 16:36:16.984: debug: Check ZSK status
-2009-06-17 16:36:16.984: debug: Lifetime(7776000 +/-150 sec) of active key 4157 exceeded (14744448 sec)
-2009-06-17 16:36:16.984: debug: ->depreciate it
-2009-06-17 16:36:16.984: debug: ->activate published key 34925
-2009-06-17 16:36:16.984: notice: "example.net.": lifetime of zone signing key 4157 exceeded: ZSK rollover done
-2009-06-17 16:36:16.984: debug: Re-signing necessary: Modfied zone key set
-2009-06-17 16:36:16.984: notice: "example.net.": re-signing triggered: Modfied zone key set
-2009-06-17 16:36:16.984: debug: Writing key file "./example.net/dnskey.db"
-2009-06-17 16:36:16.985: debug: Incrementing serial number in file "./example.net/zone.db"
-2009-06-17 16:36:16.985: debug: Signing zone "example.net."
-2009-06-17 16:36:16.985: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private"
-2009-06-17 16:36:17.102: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-17 16:36:17.102: debug: Signing completed after 1s.
-2009-06-17 16:36:17.102: debug:
-2009-06-17 16:36:17.102: notice: end of run: 0 errors occured
-2009-06-24 16:33:27.617: notice: ------------------------------------------------------------
-2009-06-24 16:33:27.617: notice: running ../../dnssec-signer -v -v
-2009-06-24 16:33:27.619: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-24 16:33:27.619: debug: Check RFC5011 status
-2009-06-24 16:33:27.620: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-24 16:33:27.620: debug: Check KSK status
-2009-06-24 16:33:27.620: warning: "sub.example.net.": lifetime of key signing key 18846 exceeded since 16w5d15h37m59s
-2009-06-24 16:33:27.620: debug: Check ZSK status
-2009-06-24 16:33:27.620: debug: Lifetime(259200 +/-150 sec) of active key 49656 exceeded (801286 sec)
-2009-06-24 16:33:27.620: debug: ->depreciate it
-2009-06-24 16:33:27.620: debug: ->activate published key 37135
-2009-06-24 16:33:27.620: notice: "sub.example.net.": lifetime of zone signing key 49656 exceeded: ZSK rollover done
-2009-06-24 16:33:27.620: debug: New key for publishing needed
-2009-06-24 16:33:27.751: debug: ->creating new key 25272
-2009-06-24 16:33:27.751: info: "sub.example.net.": new key 25272 generated for publishing
-2009-06-24 16:33:27.751: debug: Re-signing necessary: Modfied zone key set
-2009-06-24 16:33:27.751: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
-2009-06-24 16:33:27.751: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-24 16:33:27.751: debug: Signing zone "sub.example.net."
-2009-06-24 16:33:27.751: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 50C9C8 -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-06-24 16:33:27.859: error: "sub.example.net.": signing failed!
-2009-06-24 16:33:27.859: debug: Signing completed after 0s.
-2009-06-24 16:33:27.859: debug:
-2009-06-24 16:33:27.859: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-24 16:33:27.859: debug: Check RFC5011 status
-2009-06-24 16:33:27.859: debug: Check ZSK status
-2009-06-24 16:33:27.859: debug: Lifetime(29100 sec) of depreciated key 4157 exceeded (604631 sec)
-2009-06-24 16:33:27.859: info: "example.net.": old ZSK 4157 removed
-2009-06-24 16:33:27.860: debug: ->remove it
-2009-06-24 16:33:27.860: debug: Re-signing necessary: Modfied zone key set
-2009-06-24 16:33:27.860: notice: "example.net.": re-signing triggered: Modfied zone key set
-2009-06-24 16:33:27.860: debug: Writing key file "./example.net/dnskey.db"
-2009-06-24 16:33:27.860: debug: Incrementing serial number in file "./example.net/zone.db"
-2009-06-24 16:33:27.860: debug: Signing zone "example.net."
-2009-06-24 16:33:27.860: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private"
-2009-06-24 16:33:27.966: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-24 16:33:27.966: debug: Signing completed after 0s.
-2009-06-24 16:33:27.966: debug:
-2009-06-24 16:33:27.966: notice: end of run: 1 error occured
-2009-06-24 16:42:06.709: notice: ------------------------------------------------------------
-2009-06-24 16:42:06.709: notice: running ../../dnssec-signer -v -v
-2009-06-24 16:42:06.711: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-24 16:42:06.711: debug: Check RFC5011 status
-2009-06-24 16:42:06.711: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-24 16:42:06.711: debug: Check KSK status
-2009-06-24 16:42:06.711: debug: No active KSK found: generate new one
-2009-06-24 16:42:06.855: info: "sub.example.net.": generated new KSK 48516
-2009-06-24 16:42:06.855: debug: Check ZSK status
-2009-06-24 16:42:06.855: debug: No active ZSK found: generate new one
-2009-06-24 16:42:06.883: info: "sub.example.net.": generated new ZSK 33383
-2009-06-24 16:42:06.883: debug: Re-signing necessary: Modfied zone key set
-2009-06-24 16:42:06.883: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
-2009-06-24 16:42:06.883: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-24 16:42:06.883: debug: Signing zone "sub.example.net."
-2009-06-24 16:42:06.883: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-06-24 16:42:06.905: error: "sub.example.net.": signing failed!
-2009-06-24 16:42:06.905: debug: Signing completed after 0s.
-2009-06-24 16:42:06.905: debug:
-2009-06-24 16:42:06.905: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-24 16:42:06.905: debug: Check RFC5011 status
-2009-06-24 16:42:06.905: debug: Check ZSK status
-2009-06-24 16:42:06.905: debug: Re-signing not necessary!
-2009-06-24 16:42:06.905: debug: Check if there is a parent file to copy
-2009-06-24 16:42:06.905: debug:
-2009-06-24 16:42:06.905: notice: end of run: 1 error occured
-2009-06-24 16:42:31.402: notice: ------------------------------------------------------------
-2009-06-24 16:42:31.402: notice: running ../../dnssec-signer -v -v
-2009-06-24 16:42:31.404: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-24 16:42:31.404: debug: Check RFC5011 status
-2009-06-24 16:42:31.404: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-24 16:42:31.404: debug: Check KSK status
-2009-06-24 16:42:31.404: debug: Check ZSK status
-2009-06-24 16:42:31.404: debug: Re-signing necessary: Modified keys
-2009-06-24 16:42:31.405: notice: "sub.example.net.": re-signing triggered: Modified keys
-2009-06-24 16:42:31.405: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-24 16:42:31.405: debug: Signing zone "sub.example.net."
-2009-06-24 16:42:31.405: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-06-24 16:42:31.449: error: "sub.example.net.": signing failed!
-2009-06-24 16:42:31.450: debug: Signing completed after 0s.
-2009-06-24 16:42:31.450: debug:
-2009-06-24 16:42:31.450: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-24 16:42:31.450: debug: Check RFC5011 status
-2009-06-24 16:42:31.450: debug: Check ZSK status
-2009-06-24 16:42:31.450: debug: Re-signing not necessary!
-2009-06-24 16:42:31.450: debug: Check if there is a parent file to copy
-2009-06-24 16:42:31.450: debug:
-2009-06-24 16:42:31.450: notice: end of run: 1 error occured
-2009-06-24 16:42:48.193: notice: ------------------------------------------------------------
-2009-06-24 16:42:48.193: notice: running ../../dnssec-signer -v -v
-2009-06-24 16:42:48.195: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-24 16:42:48.195: debug: Check RFC5011 status
-2009-06-24 16:42:48.195: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-24 16:42:48.195: debug: Check KSK status
-2009-06-24 16:42:48.195: debug: Check ZSK status
-2009-06-24 16:42:48.195: debug: Re-signing necessary: Modified keys
-2009-06-24 16:42:48.195: notice: "sub.example.net.": re-signing triggered: Modified keys
-2009-06-24 16:42:48.195: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-24 16:42:48.195: debug: Signing zone "sub.example.net."
-2009-06-24 16:42:48.195: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 F46ADF -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-06-24 16:42:48.212: error: "sub.example.net.": signing failed!
-2009-06-24 16:42:48.212: debug: Signing completed after 0s.
-2009-06-24 16:42:48.212: debug:
-2009-06-24 16:42:48.212: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-24 16:42:48.212: debug: Check RFC5011 status
-2009-06-24 16:42:48.212: debug: Check ZSK status
-2009-06-24 16:42:48.212: debug: Re-signing not necessary!
-2009-06-24 16:42:48.212: debug: Check if there is a parent file to copy
-2009-06-24 16:42:48.212: debug:
-2009-06-24 16:42:48.212: notice: end of run: 1 error occured
-2009-06-24 16:44:22.959: notice: ------------------------------------------------------------
-2009-06-24 16:44:22.959: notice: running ../../dnssec-signer -v -v
-2009-06-24 16:44:22.961: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-24 16:44:22.961: debug: Check RFC5011 status
-2009-06-24 16:44:22.961: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-24 16:44:22.961: debug: Check KSK status
-2009-06-24 16:44:22.961: debug: Check ZSK status
-2009-06-24 16:44:22.961: debug: No active ZSK found: generate new one
-2009-06-24 16:44:23.008: info: "sub.example.net.": generated new ZSK 14600
-2009-06-24 16:44:23.008: debug: Re-signing necessary: Modfied zone key set
-2009-06-24 16:44:23.008: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
-2009-06-24 16:44:23.009: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-24 16:44:23.009: debug: Signing zone "sub.example.net."
-2009-06-24 16:44:23.009: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 86BF2F -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-06-24 16:44:23.040: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-24 16:44:23.040: debug: Signing completed after 0s.
-2009-06-24 16:44:23.040: debug:
-2009-06-24 16:44:23.040: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-24 16:44:23.040: debug: Check RFC5011 status
-2009-06-24 16:44:23.040: debug: Check ZSK status
-2009-06-24 16:44:23.040: debug: Re-signing not necessary!
-2009-06-24 16:44:23.040: debug: Check if there is a parent file to copy
-2009-06-24 16:44:23.040: debug:
-2009-06-24 16:44:23.040: notice: end of run: 0 errors occured
-2009-06-24 16:50:36.189: notice: ------------------------------------------------------------
-2009-06-24 16:50:36.189: notice: running ../../dnssec-signer -v -v
-2009-06-24 16:50:36.191: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-24 16:50:36.191: debug: Check RFC5011 status
-2009-06-24 16:50:36.191: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-24 16:50:36.191: debug: Check KSK status
-2009-06-24 16:50:36.192: debug: Check ZSK status
-2009-06-24 16:50:36.192: debug: Re-signing not necessary!
-2009-06-24 16:50:36.192: debug: Check if there is a parent file to copy
-2009-06-24 16:50:36.192: debug:
-2009-06-24 16:50:36.192: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-24 16:50:36.192: debug: Check RFC5011 status
-2009-06-24 16:50:36.192: debug: Check ZSK status
-2009-06-24 16:50:36.193: debug: Re-signing not necessary!
-2009-06-24 16:50:36.193: debug: Check if there is a parent file to copy
-2009-06-24 16:50:36.193: debug:
-2009-06-24 16:50:36.193: notice: end of run: 0 errors occured
-2009-06-24 16:50:42.877: notice: ------------------------------------------------------------
-2009-06-24 16:50:42.877: notice: running ../../dnssec-signer -v -v -f
-2009-06-24 16:50:42.879: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-24 16:50:42.879: debug: Check RFC5011 status
-2009-06-24 16:50:42.879: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-24 16:50:42.879: debug: Check KSK status
-2009-06-24 16:50:42.879: debug: Check ZSK status
-2009-06-24 16:50:42.879: debug: Re-signing necessary: Option -f
-2009-06-24 16:50:42.879: notice: "sub.example.net.": re-signing triggered: Option -f
-2009-06-24 16:50:42.879: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-24 16:50:42.879: debug: Signing zone "sub.example.net."
-2009-06-24 16:50:42.879: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 FB37DB -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-06-24 16:50:42.932: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-24 16:50:42.932: debug: Signing completed after 0s.
-2009-06-24 16:50:42.932: debug:
-2009-06-24 16:50:42.932: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-24 16:50:42.932: debug: Check RFC5011 status
-2009-06-24 16:50:42.932: debug: Check ZSK status
-2009-06-24 16:50:42.932: debug: Re-signing necessary: Option -f
-2009-06-24 16:50:42.932: notice: "example.net.": re-signing triggered: Option -f
-2009-06-24 16:50:42.932: debug: Writing key file "./example.net/dnskey.db"
-2009-06-24 16:50:42.933: debug: Incrementing serial number in file "./example.net/zone.db"
-2009-06-24 16:50:42.933: debug: Signing zone "example.net."
-2009-06-24 16:50:42.933: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private"
-2009-06-24 16:50:42.978: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-24 16:50:42.978: debug: Signing completed after 0s.
-2009-06-24 16:50:42.978: debug:
-2009-06-24 16:50:42.979: notice: end of run: 0 errors occured
-2009-06-24 16:50:51.923: notice: ------------------------------------------------------------
-2009-06-24 16:50:51.923: notice: running ../../dnssec-signer -v -v -f
-2009-06-24 16:50:51.924: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-24 16:50:51.924: debug: Check RFC5011 status
-2009-06-24 16:50:51.924: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-24 16:50:51.924: debug: Check KSK status
-2009-06-24 16:50:51.924: debug: Check ZSK status
-2009-06-24 16:50:51.925: debug: Re-signing necessary: Option -f
-2009-06-24 16:50:51.925: notice: "sub.example.net.": re-signing triggered: Option -f
-2009-06-24 16:50:51.925: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-24 16:50:51.925: debug: Signing zone "sub.example.net."
-2009-06-24 16:50:51.925: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 E830EA -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-06-24 16:50:51.972: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-24 16:50:51.973: debug: Signing completed after 0s.
-2009-06-24 16:50:51.973: debug:
-2009-06-24 16:50:51.973: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-24 16:50:51.973: debug: Check RFC5011 status
-2009-06-24 16:50:51.973: debug: Check ZSK status
-2009-06-24 16:50:51.973: debug: Re-signing necessary: Option -f
-2009-06-24 16:50:51.973: notice: "example.net.": re-signing triggered: Option -f
-2009-06-24 16:50:51.973: debug: Writing key file "./example.net/dnskey.db"
-2009-06-24 16:50:51.973: debug: Incrementing serial number in file "./example.net/zone.db"
-2009-06-24 16:50:51.973: debug: Signing zone "example.net."
-2009-06-24 16:50:51.973: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private"
-2009-06-24 16:50:52.017: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-24 16:50:52.017: debug: Signing completed after 1s.
-2009-06-24 16:50:52.017: debug:
-2009-06-24 16:50:52.017: notice: end of run: 0 errors occured
-2009-06-24 16:51:19.914: notice: ------------------------------------------------------------
-2009-06-24 16:51:19.914: notice: running ../../dnssec-signer -v -v -f
-2009-06-24 16:51:19.916: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-24 16:51:19.916: debug: Check RFC5011 status
-2009-06-24 16:51:19.916: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-24 16:51:19.916: debug: Check KSK status
-2009-06-24 16:51:19.916: debug: Check ZSK status
-2009-06-24 16:51:19.916: debug: Re-signing necessary: Option -f
-2009-06-24 16:51:19.916: notice: "sub.example.net.": re-signing triggered: Option -f
-2009-06-24 16:51:19.916: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-24 16:51:19.917: debug: Signing zone "sub.example.net."
-2009-06-24 16:51:19.917: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 8DBC26 -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private"
-2009-06-24 16:51:19.969: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-24 16:51:19.969: debug: Signing completed after 0s.
-2009-06-24 16:51:19.969: debug:
-2009-06-24 16:51:19.969: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-24 16:51:19.969: debug: Check RFC5011 status
-2009-06-24 16:51:19.969: debug: Check ZSK status
-2009-06-24 16:51:19.969: debug: Re-signing necessary: Option -f
-2009-06-24 16:51:19.969: notice: "example.net.": re-signing triggered: Option -f
-2009-06-24 16:51:19.969: debug: Writing key file "./example.net/dnskey.db"
-2009-06-24 16:51:19.969: debug: Incrementing serial number in file "./example.net/zone.db"
-2009-06-24 16:51:19.969: debug: Signing zone "example.net."
-2009-06-24 16:51:19.969: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private"
-2009-06-24 16:51:20.018: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-24 16:51:20.018: debug: Signing completed after 1s.
-2009-06-24 16:51:20.018: debug:
-2009-06-24 16:51:20.018: notice: end of run: 0 errors occured
-2009-06-24 16:55:38.094: notice: ------------------------------------------------------------
-2009-06-24 16:55:38.094: notice: running ../../dnssec-signer -v -v -f
-2009-06-24 16:55:38.096: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-24 16:55:38.096: debug: Check RFC5011 status
-2009-06-24 16:55:38.096: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-24 16:55:38.096: debug: Check KSK status
-2009-06-24 16:55:38.096: debug: Check ZSK status
-2009-06-24 16:55:38.096: debug: Re-signing necessary: Option -f
-2009-06-24 16:55:38.096: notice: "sub.example.net.": re-signing triggered: Option -f
-2009-06-24 16:55:38.096: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-24 16:55:38.097: debug: Signing zone "sub.example.net."
-2009-06-24 16:55:38.097: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 69AB8E -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private 2>&1"
-2009-06-24 16:55:38.144: debug: Cmd dnssec-signzone return: "Verifying the zone using the following algorithms: NSEC3RSASHA1."
-2009-06-24 16:55:38.144: debug: Signing completed after 0s.
-2009-06-24 16:55:38.144: debug:
-2009-06-24 16:55:38.144: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-24 16:55:38.144: debug: Check RFC5011 status
-2009-06-24 16:55:38.144: debug: Check ZSK status
-2009-06-24 16:55:38.144: debug: Re-signing necessary: Option -f
-2009-06-24 16:55:38.144: notice: "example.net.": re-signing triggered: Option -f
-2009-06-24 16:55:38.144: debug: Writing key file "./example.net/dnskey.db"
-2009-06-24 16:55:38.144: debug: Incrementing serial number in file "./example.net/zone.db"
-2009-06-24 16:55:38.144: debug: Signing zone "example.net."
-2009-06-24 16:55:38.144: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1"
-2009-06-24 16:55:38.182: debug: Cmd dnssec-signzone return: "Verifying the zone using the following algorithms: RSASHA1."
-2009-06-24 16:55:38.182: debug: Signing completed after 0s.
-2009-06-24 16:55:38.182: debug:
-2009-06-24 16:55:38.182: notice: end of run: 0 errors occured
-2009-06-24 17:12:06.145: notice: ------------------------------------------------------------
-2009-06-24 17:12:06.145: notice: running ../../dnssec-signer -v -v -f
-2009-06-24 17:12:06.147: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-24 17:12:06.147: debug: Check RFC5011 status
-2009-06-24 17:12:06.147: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-24 17:12:06.147: debug: Check KSK status
-2009-06-24 17:12:06.147: debug: Check ZSK status
-2009-06-24 17:12:06.147: debug: Re-signing necessary: Option -f
-2009-06-24 17:12:06.147: notice: "sub.example.net.": re-signing triggered: Option -f
-2009-06-24 17:12:06.147: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-24 17:12:06.147: debug: Signing zone "sub.example.net."
-2009-06-24 17:12:06.147: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 589BFC -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private 2>&1"
-2009-06-24 17:12:06.204: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-24 17:12:06.204: debug: Signing completed after 0s.
-2009-06-24 17:12:06.204: debug:
-2009-06-24 17:12:06.204: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-24 17:12:06.204: debug: Check RFC5011 status
-2009-06-24 17:12:06.204: debug: Check ZSK status
-2009-06-24 17:12:06.204: debug: Re-signing necessary: Option -f
-2009-06-24 17:12:06.205: notice: "example.net.": re-signing triggered: Option -f
-2009-06-24 17:12:06.205: debug: Writing key file "./example.net/dnskey.db"
-2009-06-24 17:12:06.205: debug: Incrementing serial number in file "./example.net/zone.db"
-2009-06-24 17:12:06.205: debug: Signing zone "example.net."
-2009-06-24 17:12:06.205: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1"
-2009-06-24 17:12:06.259: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-24 17:12:06.259: debug: Signing completed after 0s.
-2009-06-24 17:12:06.259: debug:
-2009-06-24 17:12:06.259: notice: end of run: 0 errors occured
-2009-06-30 11:35:09.298: notice: ------------------------------------------------------------
-2009-06-30 11:35:09.298: notice: running ../../dnssec-signer -v -v
-2009-06-30 11:35:09.326: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-30 11:35:09.326: debug: Check RFC5011 status
-2009-06-30 11:35:09.326: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-30 11:35:09.326: debug: Check KSK status
-2009-06-30 11:35:09.326: debug: Check ZSK status
-2009-06-30 11:35:09.326: debug: Lifetime(259200 +/-150 sec) of active key 14600 exceeded (499847 sec)
-2009-06-30 11:35:09.326: debug: ->waiting for published key
-2009-06-30 11:35:09.326: notice: "sub.example.net.": lifetime of zone signing key 14600 exceeded since 2d18h50m47s: ZSK rollover deferred: waiting for published key
-2009-06-30 11:35:09.326: debug: New key for publishing needed
-2009-06-30 11:35:09.482: debug: ->creating new key 32345
-2009-06-30 11:35:09.482: info: "sub.example.net.": new key 32345 generated for publishing
-2009-06-30 11:35:09.482: debug: Re-signing necessary: Modfied zone key set
-2009-06-30 11:35:09.483: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
-2009-06-30 11:35:09.483: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-30 11:35:09.483: debug: Signing zone "sub.example.net."
-2009-06-30 11:35:09.483: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 E84B0F -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private 2>&1"
-2009-06-30 11:35:09.838: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-30 11:35:09.838: debug: Signing completed after 0s.
-2009-06-30 11:35:09.838: debug:
-2009-06-30 11:35:09.838: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-30 11:35:09.838: debug: Check RFC5011 status
-2009-06-30 11:35:09.838: debug: Check ZSK status
-2009-06-30 11:35:09.838: debug: New key for publishing needed
-2009-06-30 11:35:09.896: debug: ->creating new key 48089
-2009-06-30 11:35:09.896: info: "example.net.": new key 48089 generated for publishing
-2009-06-30 11:35:09.896: debug: Re-signing necessary: Modfied zone key set
-2009-06-30 11:35:09.897: notice: "example.net.": re-signing triggered: Modfied zone key set
-2009-06-30 11:35:09.897: debug: Writing key file "./example.net/dnskey.db"
-2009-06-30 11:35:09.897: debug: Incrementing serial number in file "./example.net/zone.db"
-2009-06-30 11:35:09.897: debug: Signing zone "example.net."
-2009-06-30 11:35:09.897: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1"
-2009-06-30 11:35:09.997: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-30 11:35:09.997: debug: Signing completed after 0s.
-2009-06-30 11:35:09.997: debug:
-2009-06-30 11:35:09.997: notice: end of run: 0 errors occured
-2009-06-30 12:01:53.878: notice: ------------------------------------------------------------
-2009-06-30 12:01:53.878: notice: running ../../dnssec-signer -v -v
-2009-06-30 12:01:53.880: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-30 12:01:53.881: debug: Check RFC5011 status
-2009-06-30 12:01:53.881: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-30 12:01:53.881: debug: Check KSK status
-2009-06-30 12:01:53.881: debug: Check ZSK status
-2009-06-30 12:01:53.881: debug: Lifetime(259200 +/-150 sec) of active key 14600 exceeded (501451 sec)
-2009-06-30 12:01:53.881: debug: ->waiting for published key
-2009-06-30 12:01:53.881: notice: "sub.example.net.": lifetime of zone signing key 14600 exceeded since 2d19h17m31s: ZSK rollover deferred: waiting for published key
-2009-06-30 12:01:53.881: debug: Re-signing not necessary!
-2009-06-30 12:01:53.881: debug: Check if there is a parent file to copy
-2009-06-30 12:01:53.881: debug:
-2009-06-30 12:01:53.881: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-30 12:01:53.881: debug: Check RFC5011 status
-2009-06-30 12:01:53.881: debug: Check ZSK status
-2009-06-30 12:01:53.881: debug: Re-signing not necessary!
-2009-06-30 12:01:53.881: debug: Check if there is a parent file to copy
-2009-06-30 12:01:53.881: debug:
-2009-06-30 12:01:53.881: notice: end of run: 0 errors occured
-2009-06-30 12:02:05.490: notice: ------------------------------------------------------------
-2009-06-30 12:02:05.490: notice: running ../../dnssec-signer -f -v -v
-2009-06-30 12:02:05.492: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-30 12:02:05.492: debug: Check RFC5011 status
-2009-06-30 12:02:05.492: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-30 12:02:05.492: debug: Check KSK status
-2009-06-30 12:02:05.492: debug: Check ZSK status
-2009-06-30 12:02:05.492: debug: Lifetime(259200 +/-150 sec) of active key 14600 exceeded (501463 sec)
-2009-06-30 12:02:05.492: debug: ->waiting for published key
-2009-06-30 12:02:05.492: notice: "sub.example.net.": lifetime of zone signing key 14600 exceeded since 2d19h17m43s: ZSK rollover deferred: waiting for published key
-2009-06-30 12:02:05.492: debug: Re-signing necessary: Option -f
-2009-06-30 12:02:05.492: notice: "sub.example.net.": re-signing triggered: Option -f
-2009-06-30 12:02:05.492: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-30 12:02:05.492: debug: Signing zone "sub.example.net."
-2009-06-30 12:02:05.492: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 50B303 -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private 2>&1"
-2009-06-30 12:02:05.543: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-30 12:02:05.543: debug: Signing completed after 0s.
-2009-06-30 12:02:05.543: debug:
-2009-06-30 12:02:05.543: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-30 12:02:05.543: debug: Check RFC5011 status
-2009-06-30 12:02:05.543: debug: Check ZSK status
-2009-06-30 12:02:05.543: debug: Re-signing necessary: Option -f
-2009-06-30 12:02:05.543: notice: "example.net.": re-signing triggered: Option -f
-2009-06-30 12:02:05.543: debug: Writing key file "./example.net/dnskey.db"
-2009-06-30 12:02:05.544: debug: Incrementing serial number in file "./example.net/zone.db"
-2009-06-30 12:02:05.544: debug: Signing zone "example.net."
-2009-06-30 12:02:05.544: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1"
-2009-06-30 12:02:05.602: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-30 12:02:05.602: debug: Signing completed after 0s.
-2009-06-30 12:02:05.602: debug:
-2009-06-30 12:02:05.602: notice: end of run: 0 errors occured
-2009-06-30 13:02:04.436: notice: ------------------------------------------------------------
-2009-06-30 13:02:04.436: notice: running ../../dnssec-signer -v -v
-2009-06-30 13:02:04.438: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-30 13:02:04.438: debug: Check RFC5011 status
-2009-06-30 13:02:04.438: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-30 13:02:04.438: debug: Check KSK status
-2009-06-30 13:02:04.438: debug: Check ZSK status
-2009-06-30 13:02:04.438: debug: Lifetime(259200 +/-150 sec) of active key 14600 exceeded (505062 sec)
-2009-06-30 13:02:04.438: debug: ->depreciate it
-2009-06-30 13:02:04.439: debug: ->activate published key 32345
-2009-06-30 13:02:04.439: notice: "sub.example.net.": lifetime of zone signing key 14600 exceeded: ZSK rollover done
-2009-06-30 13:02:04.439: debug: Re-signing necessary: Modfied zone key set
-2009-06-30 13:02:04.439: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
-2009-06-30 13:02:04.439: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-30 13:02:04.439: debug: Signing zone "sub.example.net."
-2009-06-30 13:02:04.439: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 0140D2 -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private 2>&1"
-2009-06-30 13:02:04.491: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-30 13:02:04.491: debug: Signing completed after 0s.
-2009-06-30 13:02:04.491: debug:
-2009-06-30 13:02:04.491: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-30 13:02:04.491: debug: Check RFC5011 status
-2009-06-30 13:02:04.491: debug: Check ZSK status
-2009-06-30 13:02:04.491: debug: Re-signing not necessary!
-2009-06-30 13:02:04.491: debug: Check if there is a parent file to copy
-2009-06-30 13:02:04.491: debug:
-2009-06-30 13:02:04.491: notice: end of run: 0 errors occured
-2009-06-30 13:02:21.019: notice: ------------------------------------------------------------
-2009-06-30 13:02:21.019: notice: running ../../dnssec-signer -f -v -v
-2009-06-30 13:02:21.021: debug: parsing zone "sub.example.net." in dir "./sub.example.net"
-2009-06-30 13:02:21.021: debug: Check RFC5011 status
-2009-06-30 13:02:21.021: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
-2009-06-30 13:02:21.021: debug: Check KSK status
-2009-06-30 13:02:21.021: debug: Check ZSK status
-2009-06-30 13:02:21.022: debug: Re-signing necessary: Option -f
-2009-06-30 13:02:21.022: notice: "sub.example.net.": re-signing triggered: Option -f
-2009-06-30 13:02:21.022: debug: Writing key file "./sub.example.net/dnskey.db"
-2009-06-30 13:02:21.022: debug: Signing zone "sub.example.net."
-2009-06-30 13:02:21.022: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -3 86F43F -g -p -d ../keysets -o sub.example.net. -e +172800 -l dlv.trusted-keys.de -N unixtime zone.db K*.private 2>&1"
-2009-06-30 13:02:21.070: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-30 13:02:21.070: debug: Signing completed after 0s.
-2009-06-30 13:02:21.070: debug:
-2009-06-30 13:02:21.070: debug: parsing zone "example.net." in dir "./example.net"
-2009-06-30 13:02:21.070: debug: Check RFC5011 status
-2009-06-30 13:02:21.070: debug: Check ZSK status
-2009-06-30 13:02:21.070: debug: Re-signing necessary: Option -f
-2009-06-30 13:02:21.070: notice: "example.net.": re-signing triggered: Option -f
-2009-06-30 13:02:21.071: debug: Writing key file "./example.net/dnskey.db"
-2009-06-30 13:02:21.071: debug: Incrementing serial number in file "./example.net/zone.db"
-2009-06-30 13:02:21.071: debug: Signing zone "example.net."
-2009-06-30 13:02:21.071: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1"
-2009-06-30 13:02:21.121: debug: Cmd dnssec-signzone return: "zone.db.signed"
-2009-06-30 13:02:21.121: debug: Signing completed after 0s.
-2009-06-30 13:02:21.121: debug:
-2009-06-30 13:02:21.121: notice: end of run: 0 errors occured
git.samba.org / tridge / bind9.git / blobdiff