RFC5011 : 30days add-holddown timer

Daisuke HIGASHI daisuke.higashi at gmail.com
Wed Aug 16 16:46:05 UTC 2017


Hi,

  In the moment unbound-anchor(8) creates root,key file that contains
new KSK trust anchor as ADDPEND state. Does it take 30 days to update
new key’s state to VALID ?

(If so, new Unbound installation after 11 Sep (30days to the KSK roll)
fail to update trusted sets until KSK roll?)

Regards,
-- 
 Daisuke Higashi



More information about the Unbound-users mailing list