12010-02-06 00:26:54.533: debug: Check RFC5011 status 22010-02-06 00:26:54.533: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 32010-02-06 00:26:54.533: debug: Check KSK status 42010-02-06 00:26:54.533: debug: Check ZSK status 52010-02-06 00:26:54.533: debug: Re-signing not necessary! 62010-02-06 00:26:54.533: debug: Check if there is a parent file to copy 72010-02-06 00:29:31.291: debug: Check RFC5011 status 82010-02-06 00:29:31.291: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 92010-02-06 00:29:31.291: debug: Check KSK status 102010-02-06 00:29:31.292: debug: Check ZSK status 112010-02-06 00:29:31.292: debug: Re-signing not necessary! 122010-02-06 00:29:31.292: debug: Check if there is a parent file to copy 132010-02-06 00:40:35.043: debug: Check RFC5011 status 142010-02-06 00:40:35.043: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 152010-02-06 00:40:35.043: debug: Check KSK status 162010-02-06 00:40:35.043: debug: Check ZSK status 172010-02-06 00:40:35.043: debug: Re-signing not necessary! 182010-02-06 00:40:35.043: debug: Check if there is a parent file to copy 192010-02-06 00:52:55.403: debug: Check RFC5011 status 202010-02-06 00:52:55.403: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 212010-02-06 00:52:55.403: debug: Check KSK status 222010-02-06 00:52:55.403: debug: Check ZSK status 232010-02-06 00:52:55.403: debug: Re-signing not necessary! 242010-02-06 00:52:55.403: debug: Check if there is a parent file to copy 252010-02-07 13:53:48.304: debug: Check RFC5011 status 262010-02-07 13:53:48.304: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 272010-02-07 13:53:48.304: debug: Check KSK status 282010-02-07 13:53:48.304: debug: Check ZSK status 292010-02-07 13:53:48.304: debug: Re-signing not necessary! 302010-02-07 13:53:48.304: debug: Check if there is a parent file to copy 312010-02-07 13:54:03.466: debug: Check RFC5011 status 322010-02-07 13:54:03.466: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 332010-02-07 13:54:03.466: debug: Check KSK status 342010-02-07 13:54:03.466: debug: Check ZSK status 352010-02-07 13:54:03.466: debug: Re-signing not necessary! 362010-02-07 13:54:03.466: debug: Check if there is a parent file to copy 372010-02-07 13:54:08.019: debug: Check RFC5011 status 382010-02-07 13:54:08.019: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 392010-02-07 13:54:08.020: debug: Check KSK status 402010-02-07 13:54:08.020: debug: Check ZSK status 412010-02-07 13:54:08.020: debug: Re-signing necessary: Option -f 422010-02-07 13:54:08.020: notice: "example.net.": re-signing triggered: Option -f 432010-02-07 13:54:08.020: debug: Writing key file "./example.net/dnskey.db" 442010-02-07 13:54:08.020: debug: Incrementing serial number in file "./example.net/zone.db" 452010-02-07 13:54:08.020: debug: Signing zone "example.net." 462010-02-07 13:54:08.021: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 472010-02-07 13:54:08.125: debug: Cmd dnssec-signzone return: "zone.db.signed" 482010-02-07 13:54:08.125: debug: Signing completed after 0s. 492010-02-07 13:54:08.125: notice: "example.net.": distribution triggered 502010-02-07 13:54:08.125: debug: Distribute zone "example.net." 512010-02-07 13:54:08.125: debug: Run cmd "./dist.sh distribute example.net. ./example.net/zone.db.signed " 522010-02-07 13:54:08.129: debug: ./dist.sh distribute return: "scp ./example.net/zone.db.signed localhost:/var/named/example.net./" 532010-02-07 13:54:08.129: notice: "example.net.": reload triggered 542010-02-07 13:54:08.129: debug: Reload zone "example.net." 552010-02-07 13:54:08.129: debug: Run cmd "./dist.sh reload example.net. ./example.net/zone.db.signed " 562010-02-07 13:54:08.139: debug: ./dist.sh reload return: "rndc reload example.net. " 572010-02-07 14:06:27.670: debug: Check RFC5011 status 582010-02-07 14:06:27.670: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 592010-02-07 14:06:27.670: debug: Check KSK status 602010-02-07 14:06:27.670: debug: Check ZSK status 612010-02-07 14:06:27.670: debug: Re-signing not necessary! 622010-02-07 14:06:27.671: debug: Check if there is a parent file to copy 632010-02-07 14:06:33.753: debug: Check RFC5011 status 642010-02-07 14:06:33.753: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 652010-02-07 14:06:33.753: debug: Check KSK status 662010-02-07 14:06:33.753: debug: Check ZSK status 672010-02-07 14:06:33.753: debug: Re-signing necessary: Option -f 682010-02-07 14:06:33.753: notice: "example.net.": re-signing triggered: Option -f 692010-02-07 14:06:33.753: debug: Writing key file "./example.net/dnskey.db" 702010-02-07 14:06:33.754: debug: Incrementing serial number in file "./example.net/zone.db" 712010-02-07 14:06:33.754: debug: Signing zone "example.net." 722010-02-07 14:06:33.754: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 732010-02-07 14:06:33.790: debug: Cmd dnssec-signzone return: "zone.db.signed" 742010-02-07 14:06:33.790: debug: Signing completed after 0s. 752010-02-07 14:06:33.790: notice: "example.net.": distribution triggered 762010-02-07 14:06:33.790: debug: Distribute zone "example.net." 772010-02-07 14:06:33.790: debug: Run cmd "./dist.sh distribute example.net. ./example.net/zone.db.signed " 782010-02-07 14:06:33.794: debug: ./dist.sh distribute return: "scp ./example.net/zone.db.signed localhost:/var/named/example.net./" 792010-02-07 14:06:33.794: notice: "example.net.": reload triggered 802010-02-07 14:06:33.794: debug: Reload zone "example.net." 812010-02-07 14:06:33.794: debug: Run cmd "./dist.sh reload example.net. ./example.net/zone.db.signed " 822010-02-07 14:06:33.797: debug: ./dist.sh reload return: "rndc reload example.net. " 832010-02-21 12:50:43.587: debug: Check RFC5011 status 842010-02-21 12:50:43.587: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 852010-02-21 12:50:43.587: debug: Check KSK status 862010-02-21 12:50:43.587: debug: Check ZSK status 872010-02-21 12:50:43.587: debug: Lifetime(1209600 +/-150 sec) of active key 33002 exceeded (2394625 sec) 882010-02-21 12:50:43.587: debug: ->depreciate it 892010-02-21 12:50:43.587: debug: ->activate published key 29240 902010-02-21 12:50:43.587: notice: "example.net.": lifetime of zone signing key 33002 exceeded: ZSK rollover done 912010-02-21 12:50:43.587: debug: New key for publishing needed 922010-02-21 12:50:43.658: debug: ->creating new key 5525 932010-02-21 12:50:43.658: info: "example.net.": new key 5525 generated for publishing 942010-02-21 12:50:43.658: debug: Re-signing necessary: Modfied zone key set 952010-02-21 12:50:43.658: notice: "example.net.": re-signing triggered: Modfied zone key set 962010-02-21 12:50:43.658: debug: Writing key file "./example.net/dnskey.db" 972010-02-21 12:50:43.665: debug: Incrementing serial number in file "./example.net/zone.db" 982010-02-21 12:50:43.665: debug: Signing zone "example.net." 992010-02-21 12:50:43.665: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 1002010-02-21 12:50:43.733: debug: Cmd dnssec-signzone return: "zone.db.signed" 1012010-02-21 12:50:43.733: debug: Signing completed after 0s. 1022010-02-21 12:50:51.205: debug: Check RFC5011 status 1032010-02-21 12:50:51.205: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 1042010-02-21 12:50:51.205: debug: Check KSK status 1052010-02-21 12:50:51.205: debug: Check ZSK status 1062010-02-21 12:50:51.205: debug: Re-signing not necessary! 1072010-02-21 12:50:51.205: debug: Check if there is a parent file to copy 1082010-02-21 12:51:23.497: debug: Check RFC5011 status 1092010-02-21 12:51:23.497: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 1102010-02-21 12:51:23.497: debug: Check KSK status 1112010-02-21 12:51:23.497: debug: Check ZSK status 1122010-02-21 12:51:23.497: debug: Re-signing not necessary! 1132010-02-21 12:51:23.497: debug: Check if there is a parent file to copy 1142010-02-21 19:16:18.594: debug: Check RFC5011 status 1152010-02-21 19:16:18.594: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 1162010-02-21 19:16:18.594: debug: Check KSK status 1172010-02-21 19:16:18.594: debug: Check ZSK status 1182010-02-21 19:16:18.594: debug: Re-signing not necessary! 1192010-02-21 19:16:18.594: debug: Check if there is a parent file to copy 1202010-02-21 19:32:11.378: debug: Check RFC5011 status 1212010-02-21 19:32:11.378: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 1222010-02-21 19:32:11.378: debug: Check KSK status 1232010-02-21 19:32:11.378: debug: Check ZSK status 1242010-02-21 19:32:11.378: debug: Re-signing not necessary! 1252010-02-21 19:32:11.378: debug: Check if there is a parent file to copy 1262010-02-21 19:32:15.982: debug: Check RFC5011 status 1272010-02-21 19:32:15.982: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 1282010-02-21 19:32:15.982: debug: Check KSK status 1292010-02-21 19:32:15.982: debug: Check ZSK status 1302010-02-21 19:32:15.982: debug: Re-signing necessary: Option -f 1312010-02-21 19:32:15.982: notice: "example.net.": re-signing triggered: Option -f 1322010-02-21 19:32:15.982: debug: Writing key file "./example.net/dnskey.db" 1332010-02-21 19:32:15.982: debug: Incrementing serial number in file "./example.net/zone.db" 1342010-02-21 19:32:15.982: debug: Signing zone "example.net." 1352010-02-21 19:32:15.982: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 1362010-02-21 19:32:16.019: debug: Cmd dnssec-signzone return: "zone.db.signed" 1372010-02-21 19:32:16.019: debug: Signing completed after 1s. 1382010-02-21 19:32:32.232: debug: Check RFC5011 status 1392010-02-21 19:32:32.232: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 1402010-02-21 19:32:32.233: debug: Check KSK status 1412010-02-21 19:32:32.233: debug: Check ZSK status 1422010-02-21 19:32:32.233: debug: Re-signing necessary: Option -f 1432010-02-21 19:32:32.233: notice: "example.net.": re-signing triggered: Option -f 1442010-02-21 19:32:32.233: debug: Writing key file "./example.net/dnskey.db" 1452010-02-21 19:32:32.233: debug: Incrementing serial number in file "./example.net/zone.db" 1462010-02-21 19:32:32.233: debug: Signing zone "example.net." 1472010-02-21 19:32:32.233: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 1482010-02-21 19:32:32.273: debug: Cmd dnssec-signzone return: "zone.db.signed" 1492010-02-21 19:32:32.273: debug: Signing completed after 0s. 1502010-02-25 00:12:27.060: debug: Check RFC5011 status 1512010-02-25 00:12:27.060: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 1522010-02-25 00:12:27.060: debug: Check KSK status 1532010-02-25 00:12:27.060: debug: Check ZSK status 1542010-02-25 00:12:27.060: debug: Lifetime(29100 sec) of depreciated key 33002 exceeded (300104 sec) 1552010-02-25 00:12:27.060: info: "example.net.": old ZSK 33002 removed 1562010-02-25 00:12:27.081: debug: ->remove it 1572010-02-25 00:12:27.082: debug: Re-signing necessary: Modfied zone key set 1582010-02-25 00:12:27.082: notice: "example.net.": re-signing triggered: Modfied zone key set 1592010-02-25 00:12:27.082: debug: Writing key file "./example.net/dnskey.db" 1602010-02-25 00:12:27.086: debug: Incrementing serial number in file "./example.net/zone.db" 1612010-02-25 00:12:27.086: debug: Signing zone "example.net." 1622010-02-25 00:12:27.086: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 1632010-02-25 00:12:27.173: debug: Cmd dnssec-signzone return: "zone.db.signed" 1642010-02-25 00:12:27.174: debug: Signing completed after 0s. 1652010-02-25 23:42:21.013: debug: Check RFC5011 status 1662010-02-25 23:42:21.013: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 1672010-02-25 23:42:21.013: debug: Check KSK status 1682010-02-25 23:42:21.013: debug: Check ZSK status 1692010-02-25 23:42:21.013: debug: Re-signing not necessary! 1702010-02-25 23:42:21.013: debug: Check if there is a parent file to copy 1712010-03-02 10:59:12.416: debug: Check RFC5011 status 1722010-03-02 10:59:12.416: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 1732010-03-02 10:59:12.416: debug: Check KSK status 1742010-03-02 10:59:12.416: debug: Check ZSK status 1752010-03-02 10:59:12.416: debug: Re-signing necessary: re-signing interval (2d) reached 1762010-03-02 10:59:12.416: notice: "example.net.": re-signing triggered: re-signing interval (2d) reached 1772010-03-02 10:59:12.416: debug: Writing key file "./example.net/dnskey.db" 1782010-03-02 10:59:12.449: debug: Incrementing serial number in file "./example.net/zone.db" 1792010-03-02 10:59:12.449: debug: Signing zone "example.net." 1802010-03-02 10:59:12.450: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 1812010-03-02 10:59:12.530: debug: Cmd dnssec-signzone return: "zone.db.signed" 1822010-03-02 10:59:12.530: debug: Signing completed after 0s. 1832010-03-03 23:22:00.415: debug: Check RFC5011 status 1842010-03-03 23:22:00.415: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 1852010-03-03 23:22:00.415: debug: Check KSK status 1862010-03-03 23:22:00.415: debug: Check ZSK status 1872010-03-03 23:22:00.416: debug: Re-signing not necessary! 1882010-03-03 23:22:00.416: debug: Check if there is a parent file to copy 1892010-03-08 23:11:50.170: debug: Check RFC5011 status 1902010-03-08 23:11:50.170: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 1912010-03-08 23:11:50.170: debug: Check KSK status 1922010-03-08 23:11:50.170: debug: Check ZSK status 1932010-03-08 23:11:50.171: debug: Lifetime(1209600 +/-150 sec) of active key 29240 exceeded (1333267 sec) 1942010-03-08 23:11:50.171: debug: ->depreciate it 1952010-03-08 23:11:50.171: debug: ->activate published key 5525 1962010-03-08 23:11:50.171: notice: "example.net.": lifetime of zone signing key 29240 exceeded: ZSK rollover done 1972010-03-08 23:11:50.171: debug: New key for publishing needed 1982010-03-08 23:11:50.228: debug: ->creating new key 21482 1992010-03-08 23:11:50.228: info: "example.net.": new key 21482 generated for publishing 2002010-03-08 23:11:50.228: debug: Re-signing necessary: Modfied zone key set 2012010-03-08 23:11:50.228: notice: "example.net.": re-signing triggered: Modfied zone key set 2022010-03-08 23:11:50.228: debug: Writing key file "././example.net/dnskey.db" 2032010-03-08 23:11:50.235: debug: Incrementing serial number in file "././example.net/zone.db" 2042010-03-08 23:11:50.235: debug: Signing zone "example.net." 2052010-03-08 23:11:50.235: debug: Run cmd "cd ././example.net; /usr/local/sbin/dnssec-signzone -n 1 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 2062010-03-08 23:11:50.294: debug: Cmd dnssec-signzone return: "zone.db.signed" 2072010-03-08 23:11:50.294: debug: Signing completed after 0s. 2082010-03-08 23:12:56.212: debug: Check RFC5011 status 2092010-03-08 23:12:56.212: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 2102010-03-08 23:12:56.212: debug: Check KSK status 2112010-03-08 23:12:56.212: debug: Check ZSK status 2122010-03-08 23:12:56.212: debug: Re-signing necessary: Modfied zone key set 2132010-03-08 23:12:56.212: notice: "example.net.": re-signing triggered: Modfied zone key set 2142010-03-08 23:12:56.212: debug: Writing key file "././example.net/dnskey.db" 2152010-03-08 23:12:56.213: debug: Incrementing serial number in file "././example.net/zone.db" 2162010-03-08 23:12:56.213: debug: Signing zone "example.net." 2172010-03-08 23:12:56.213: debug: Run cmd "cd ././example.net; /usr/local/sbin/dnssec-signzone -n 1 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 2182010-03-08 23:12:56.278: debug: Cmd dnssec-signzone return: "zone.db.signed" 2192010-03-08 23:12:56.279: debug: Signing completed after 0s. 2202010-03-08 23:13:36.984: debug: Check RFC5011 status 2212010-03-08 23:13:36.984: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 2222010-03-08 23:13:36.984: debug: Check KSK status 2232010-03-08 23:13:36.984: debug: Check ZSK status 2242010-03-08 23:13:36.985: debug: Re-signing not necessary! 2252010-03-08 23:13:36.985: debug: Check if there is a parent file to copy 2262010-03-08 23:18:52.287: debug: Check RFC5011 status 2272010-03-08 23:18:52.287: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 2282010-03-08 23:18:52.287: debug: Check KSK status 2292010-03-08 23:18:52.287: debug: Check ZSK status 2302010-03-08 23:18:52.287: debug: Re-signing not necessary! 2312010-03-08 23:18:52.287: debug: Check if there is a parent file to copy 2322010-03-11 23:46:35.831: debug: Check RFC5011 status 2332010-03-11 23:46:35.831: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 2342010-03-11 23:46:35.831: debug: Check KSK status 2352010-03-11 23:46:35.831: debug: Check ZSK status 2362010-03-11 23:46:35.831: debug: Lifetime(29100 sec) of depreciated key 29240 exceeded (261285 sec) 2372010-03-11 23:46:35.831: info: "example.net.": old ZSK 29240 removed 2382010-03-11 23:46:35.832: debug: ->remove it 2392010-03-11 23:46:35.832: debug: Re-signing necessary: Modfied zone key set 2402010-03-11 23:46:35.832: notice: "example.net.": re-signing triggered: Modfied zone key set 2412010-03-11 23:46:35.832: debug: Writing key file "./example.net/dnskey.db" 2422010-03-11 23:46:35.841: debug: Incrementing serial number in file "./example.net/zone.db" 2432010-03-11 23:46:35.841: debug: Signing zone "example.net." 2442010-03-11 23:46:35.841: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 2452010-03-11 23:46:35.929: debug: Cmd dnssec-signzone return: "zone.db.signed" 2462010-03-11 23:46:35.929: debug: Signing completed after 0s. 2472010-03-11 23:52:33.132: debug: Check RFC5011 status 2482010-03-11 23:52:33.132: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 2492010-03-11 23:52:33.133: debug: Check KSK status 2502010-03-11 23:52:33.133: debug: No active KSK found: generate new one 2512010-03-11 23:52:33.374: info: "example.net.": generated new KSK 8406 2522010-03-11 23:52:33.374: debug: Check ZSK status 2532010-03-11 23:52:33.374: debug: No active ZSK found: generate new one 2542010-03-11 23:52:33.400: info: "example.net.": generated new ZSK 36257 2552010-03-11 23:52:33.400: debug: Re-signing necessary: Modfied zone key set 2562010-03-11 23:52:33.400: notice: "example.net.": re-signing triggered: Modfied zone key set 2572010-03-11 23:52:33.400: debug: Writing key file "./example.net/dnskey.db" 2582010-03-11 23:52:33.400: debug: Incrementing serial number in file "./example.net/zone.db" 2592010-03-11 23:52:33.400: debug: Signing zone "example.net." 2602010-03-11 23:52:33.400: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 69AE05 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 2612010-03-11 23:52:33.408: debug: Cmd dnssec-signzone return: "dnssec-signzone: fatal: NSEC3 generation requested with NSEC only DNSKEY" 2622010-03-11 23:52:33.408: error: "example.net.": signing failed! 2632010-03-11 23:53:27.856: debug: Check RFC5011 status 2642010-03-11 23:53:27.856: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 2652010-03-11 23:53:27.856: debug: Check KSK status 2662010-03-11 23:53:27.856: debug: Check ZSK status 2672010-03-11 23:53:27.856: debug: Re-signing necessary: Modified keys 2682010-03-11 23:53:27.856: notice: "example.net.": re-signing triggered: Modified keys 2692010-03-11 23:53:27.856: debug: Writing key file "./example.net/dnskey.db" 2702010-03-11 23:53:27.856: debug: Incrementing serial number in file "./example.net/zone.db" 2712010-03-11 23:53:27.856: debug: Signing zone "example.net." 2722010-03-11 23:53:27.856: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 67AA7F -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 2732010-03-11 23:53:27.920: debug: Cmd dnssec-signzone return: "zone.db.signed" 2742010-03-11 23:53:27.920: debug: Signing completed after 0s. 2752010-07-05 08:15:24.179: debug: Check RFC5011 status 2762010-07-05 08:15:24.179: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 2772010-07-05 08:15:24.179: debug: Check KSK status 2782010-07-05 08:15:24.179: warning: "example.net.": lifetime of key signing key 8406 exceeded since 4w5d12h49m44s 2792010-07-05 08:15:24.179: debug: Check ZSK status 2802010-07-05 08:15:24.179: debug: Lifetime(1209600 +/-150 sec) of active key 36257 exceeded (8081384 sec) 2812010-07-05 08:15:24.179: debug: ->waiting for published key 2822010-07-05 08:15:24.179: notice: "example.net.": lifetime of zone signing key 36257 exceeded since 11w2d12h49m44s: ZSK rollover deferred: waiting for published key 2832010-07-05 08:15:24.179: debug: New key for publishing needed 2842010-07-05 08:15:24.278: debug: ->creating new key 48476 2852010-07-05 08:15:24.278: info: "example.net.": new key 48476 generated for publishing 2862010-07-05 08:15:24.278: debug: Re-signing necessary: Modfied zone key set 2872010-07-05 08:15:24.278: notice: "example.net.": re-signing triggered: Modfied zone key set 2882010-07-05 08:15:24.278: debug: Writing key file "./example.net/dnskey.db" 2892010-07-05 08:15:24.278: debug: Incrementing serial number in file "./example.net/zone.db" 2902010-07-05 08:15:24.278: debug: Signing zone "example.net." 2912010-07-05 08:15:24.278: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 5816F0 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 2922010-07-05 08:15:24.315: debug: Cmd dnssec-signzone return: "zone.db.signed" 2932010-07-05 08:15:24.315: debug: Signing completed after 0s. 2942010-07-05 08:15:28.174: debug: Check RFC5011 status 2952010-07-05 08:15:28.174: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 2962010-07-05 08:15:28.174: debug: Check KSK status 2972010-07-05 08:15:28.174: warning: "example.net.": lifetime of key signing key 8406 exceeded since 4w5d12h49m48s 2982010-07-05 08:15:28.174: debug: Check ZSK status 2992010-07-05 08:15:28.174: debug: Lifetime(1209600 +/-150 sec) of active key 36257 exceeded (8081388 sec) 3002010-07-05 08:15:28.174: debug: ->waiting for published key 3012010-07-05 08:15:28.174: notice: "example.net.": lifetime of zone signing key 36257 exceeded since 11w2d12h49m48s: ZSK rollover deferred: waiting for published key 3022010-07-05 08:15:28.174: debug: Re-signing not necessary! 3032010-07-05 08:15:28.174: debug: Check if there is a parent file to copy 3042010-07-05 08:15:58.502: debug: Check RFC5011 status 3052010-07-05 08:15:58.502: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 3062010-07-05 08:15:58.503: debug: Check KSK status 3072010-07-05 08:15:58.503: warning: "example.net.": lifetime of key signing key 8406 exceeded since 4w5d12h50m18s 3082010-07-05 08:15:58.503: debug: Check ZSK status 3092010-07-05 08:15:58.503: debug: Lifetime(1209600 +/-150 sec) of active key 36257 exceeded (8081418 sec) 3102010-07-05 08:15:58.503: debug: ->waiting for published key 3112010-07-05 08:15:58.503: notice: "example.net.": lifetime of zone signing key 36257 exceeded since 11w2d12h50m18s: ZSK rollover deferred: waiting for published key 3122010-07-05 08:15:58.503: debug: Re-signing not necessary! 3132010-07-05 08:15:58.503: debug: Check if there is a parent file to copy 3142010-07-05 08:16:04.937: debug: Check RFC5011 status 3152010-07-05 08:16:04.937: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 3162010-07-05 08:16:04.937: debug: Check KSK status 3172010-07-05 08:16:04.937: warning: "example.net.": lifetime of key signing key 8406 exceeded since 4w5d12h50m24s 3182010-07-05 08:16:04.937: debug: Check ZSK status 3192010-07-05 08:16:04.937: debug: Lifetime(1209600 +/-150 sec) of active key 36257 exceeded (8081424 sec) 3202010-07-05 08:16:04.937: debug: ->waiting for published key 3212010-07-05 08:16:04.937: notice: "example.net.": lifetime of zone signing key 36257 exceeded since 11w2d12h50m24s: ZSK rollover deferred: waiting for published key 3222010-07-05 08:16:04.937: debug: Re-signing necessary: Option -f 3232010-07-05 08:16:04.937: notice: "example.net.": re-signing triggered: Option -f 3242010-07-05 08:16:04.937: debug: Writing key file "./example.net/dnskey.db" 3252010-07-05 08:16:04.937: debug: Incrementing serial number in file "./example.net/zone.db" 3262010-07-05 08:16:04.937: debug: Signing zone "example.net." 3272010-07-05 08:16:04.937: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 C58544 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 3282010-07-05 08:16:04.993: debug: Cmd dnssec-signzone return: "zone.db.signed" 3292010-07-05 08:16:04.993: debug: Signing completed after 0s. 3302010-07-05 08:16:33.604: debug: Check RFC5011 status 3312010-07-05 08:16:33.604: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 3322010-07-05 08:16:33.604: debug: Check KSK status 3332010-07-05 08:16:33.604: warning: "example.net.": lifetime of key signing key 8406 exceeded since 4w5d12h50m53s 3342010-07-05 08:16:33.604: debug: Check ZSK status 3352010-07-05 08:16:33.604: debug: Lifetime(1209600 +/-150 sec) of active key 36257 exceeded (8081453 sec) 3362010-07-05 08:16:33.604: debug: ->waiting for published key 3372010-07-05 08:16:33.604: notice: "example.net.": lifetime of zone signing key 36257 exceeded since 11w2d12h50m53s: ZSK rollover deferred: waiting for published key 3382010-07-05 08:16:33.604: debug: Re-signing necessary: Option -f 3392010-07-05 08:16:33.604: notice: "example.net.": re-signing triggered: Option -f 3402010-07-05 08:16:33.604: debug: Writing key file "./example.net/dnskey.db" 3412010-07-05 08:16:33.605: debug: Incrementing serial number in file "./example.net/zone.db" 3422010-07-05 08:16:33.605: debug: Signing zone "example.net." 3432010-07-05 08:16:33.605: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 FCB8E2 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 3442010-07-05 08:16:33.648: debug: Cmd dnssec-signzone return: "zone.db.signed" 3452010-07-05 08:16:33.648: debug: Signing completed after 0s. 3462010-07-30 01:30:55.411: debug: Check RFC5011 status 3472010-07-30 01:30:55.411: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 3482010-07-30 01:30:55.411: debug: Check KSK status 3492010-07-30 01:30:55.411: debug: Check ZSK status 3502010-07-30 01:30:55.411: debug: Lifetime(1209600 +/-150 sec) of active key 36257 exceeded (2130473 sec) 3512010-07-30 01:30:55.411: debug: ->depreciate it 3522010-07-30 01:30:55.411: debug: ->activate published key 48476 3532010-07-30 01:30:55.411: notice: "example.net.": lifetime of zone signing key 36257 exceeded: ZSK rollover done 3542010-07-30 01:30:55.411: debug: New key for publishing needed 3552010-07-30 01:30:55.493: debug: ->creating new key 1775 3562010-07-30 01:30:55.493: info: "example.net.": new key 1775 generated for publishing 3572010-07-30 01:30:55.493: debug: Re-signing necessary: Modfied zone key set 3582010-07-30 01:30:55.493: notice: "example.net.": re-signing triggered: Modfied zone key set 3592010-07-30 01:30:55.493: debug: Writing key file "./example.net/dnskey.db" 3602010-07-30 01:30:55.493: debug: Incrementing serial number in file "./example.net/zone.db" 3612010-07-30 01:30:55.493: debug: Signing zone "example.net." 3622010-07-30 01:30:55.494: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 3723BA -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 3632010-07-30 01:30:55.563: debug: Cmd dnssec-signzone return: "zone.db.signed" 3642010-07-30 01:30:55.563: debug: Signing completed after 0s. 3652010-08-26 22:52:09.539: debug: Check RFC5011 status 3662010-08-26 22:52:09.539: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 3672010-08-26 22:52:09.539: debug: Check KSK status 3682010-08-26 22:52:09.539: debug: Check ZSK status 3692010-08-26 22:52:09.539: debug: Lifetime(29100 sec) of depreciated key 36257 exceeded (2409674 sec) 3702010-08-26 22:52:09.539: info: "example.net.": old ZSK 36257 removed 3712010-08-26 22:52:09.572: debug: ->remove it 3722010-08-26 22:52:09.572: debug: Lifetime(1209600 +/-150 sec) of active key 48476 exceeded (2409674 sec) 3732010-08-26 22:52:09.572: debug: ->depreciate it 3742010-08-26 22:52:09.572: debug: ->activate published key 1775 3752010-08-26 22:52:09.572: notice: "example.net.": lifetime of zone signing key 48476 exceeded: ZSK rollover done 3762010-08-26 22:52:09.572: debug: New key for publishing needed 3772010-08-26 22:52:09.640: debug: ->creating new key 26477 3782010-08-26 22:52:09.640: info: "example.net.": new key 26477 generated for publishing 3792010-08-26 22:52:09.640: debug: Re-signing necessary: Modfied zone key set 3802010-08-26 22:52:09.640: notice: "example.net.": re-signing triggered: Modfied zone key set 3812010-08-26 22:52:09.640: debug: Writing key file "./example.net/dnskey.db" 3822010-08-26 22:52:09.641: debug: Incrementing serial number in file "./example.net/zone.db" 3832010-08-26 22:52:09.641: debug: Signing zone "example.net." 3842010-08-26 22:52:09.641: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 2F41F9 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 3852010-08-26 22:52:09.704: debug: Cmd dnssec-signzone return: "zone.db.signed" 3862010-08-26 22:52:09.704: debug: Signing completed after 0s. 3872010-08-26 22:56:02.938: debug: Check RFC5011 status 3882010-08-26 22:56:02.938: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 3892010-08-26 22:56:02.938: debug: Check KSK status 3902010-08-26 22:56:02.938: debug: Check ZSK status 3912010-08-26 22:56:02.938: debug: Re-signing not necessary! 3922010-08-26 22:56:02.938: debug: Check if there is a parent file to copy 3932010-08-26 23:06:00.593: debug: Check RFC5011 status 3942010-08-26 23:06:00.593: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 3952010-08-26 23:06:00.593: debug: Check KSK status 3962010-08-26 23:06:00.593: debug: Check ZSK status 3972010-08-26 23:06:00.593: debug: New key for publishing needed 3982010-08-26 23:06:00.631: debug: ->creating new key 18026 3992010-08-26 23:06:00.631: info: "example.net.": new key 18026 generated for publishing 4002010-08-26 23:06:00.631: debug: Re-signing necessary: Modfied zone key set 4012010-08-26 23:06:00.631: notice: "example.net.": re-signing triggered: Modfied zone key set 4022010-08-26 23:06:00.631: debug: Writing key file "./example.net/dnskey.db" 4032010-08-26 23:06:00.631: debug: Incrementing serial number in file "./example.net/zone.db" 4042010-08-26 23:06:00.631: debug: Signing zone "example.net." 4052010-08-26 23:06:00.631: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 5EA89E -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 4062010-08-26 23:06:00.672: debug: Cmd dnssec-signzone return: "zone.db.signed" 4072010-08-26 23:06:00.672: debug: Signing completed after 0s. 4082010-08-26 23:11:33.808: debug: Check RFC5011 status 4092010-08-26 23:11:33.808: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 4102010-08-26 23:11:33.809: debug: Check KSK status 4112010-08-26 23:11:33.809: debug: Check ZSK status 4122010-08-26 23:11:33.809: debug: Re-signing not necessary! 4132010-08-26 23:11:33.809: debug: Check if there is a parent file to copy 4142010-08-26 23:12:51.012: debug: Check RFC5011 status 4152010-08-26 23:12:51.012: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 4162010-08-26 23:12:51.012: debug: Check KSK status 4172010-08-26 23:12:51.012: debug: Check ZSK status 4182010-08-26 23:12:51.012: debug: Re-signing not necessary! 4192010-08-26 23:12:51.012: debug: Check if there is a parent file to copy 4202010-08-26 23:23:47.886: debug: Check RFC5011 status 4212010-08-26 23:23:47.886: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 4222010-08-26 23:23:47.886: debug: Check KSK status 4232010-08-26 23:23:47.886: debug: Check ZSK status 4242010-08-26 23:23:47.886: debug: Re-signing not necessary! 4252010-08-26 23:23:47.886: debug: Check if there is a parent file to copy 4262010-08-26 23:50:15.724: debug: Check RFC5011 status 4272010-08-26 23:50:15.724: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 4282010-08-26 23:50:15.724: debug: Check KSK status 4292010-08-26 23:50:15.724: debug: Check ZSK status 4302010-08-26 23:50:15.725: debug: Re-signing not necessary! 4312010-08-26 23:50:15.725: debug: Check if there is a parent file to copy 4322010-08-26 23:50:55.124: debug: Check RFC5011 status 4332010-08-26 23:50:55.124: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 4342010-08-26 23:50:55.124: debug: Check KSK status 4352010-08-26 23:50:55.124: debug: Check ZSK status 4362010-08-26 23:50:55.124: debug: Re-signing not necessary! 4372010-08-26 23:50:55.124: debug: Check if there is a parent file to copy 4382010-08-26 23:51:46.719: debug: Check RFC5011 status 4392010-08-26 23:51:46.719: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 4402010-08-26 23:51:46.719: debug: Check KSK status 4412010-08-26 23:51:46.719: debug: Check ZSK status 4422010-08-26 23:51:46.719: debug: Re-signing not necessary! 4432010-08-26 23:51:46.719: debug: Check if there is a parent file to copy 4442010-08-26 23:54:22.824: debug: Check RFC5011 status 4452010-08-26 23:54:22.824: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 4462010-08-26 23:54:22.824: debug: Check KSK status 4472010-08-26 23:54:22.824: debug: Check ZSK status 4482010-08-26 23:54:22.824: debug: Re-signing not necessary! 4492010-08-26 23:54:22.825: debug: Check if there is a parent file to copy 4502010-08-26 23:55:00.018: debug: Check RFC5011 status 4512010-08-26 23:55:00.018: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 4522010-08-26 23:55:00.018: debug: Check KSK status 4532010-08-26 23:55:00.018: debug: Check ZSK status 4542010-08-26 23:55:00.018: debug: New key for pre-publishing needed 4552010-08-26 23:55:00.110: debug: ->creating new key 18293 4562010-08-26 23:55:00.110: info: "example.net.": new key 18293 generated for pre-publishing 4572010-08-26 23:55:00.110: debug: Re-signing necessary: Modfied zone key set 4582010-08-26 23:55:00.110: notice: "example.net.": re-signing triggered: Modfied zone key set 4592010-08-26 23:55:00.110: debug: Writing key file "./example.net/dnskey.db" 4602010-08-26 23:55:00.110: debug: Incrementing serial number in file "./example.net/zone.db" 4612010-08-26 23:55:00.110: debug: Signing zone "example.net." 4622010-08-26 23:55:00.111: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 EBE919 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 4632010-08-26 23:55:00.168: debug: Cmd dnssec-signzone return: "zone.db.signed" 4642010-08-26 23:55:00.169: debug: Signing completed after 0s. 4652010-08-26 23:56:17.466: debug: Check RFC5011 status 4662010-08-26 23:56:17.466: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 4672010-08-26 23:56:17.466: debug: Check KSK status 4682010-08-26 23:56:17.466: debug: Check ZSK status 4692010-08-26 23:56:17.466: debug: Re-signing necessary: Modfied zone key set 4702010-08-26 23:56:17.466: notice: "example.net.": re-signing triggered: Modfied zone key set 4712010-08-26 23:56:17.466: debug: Writing key file "./example.net/dnskey.db" 4722010-08-26 23:56:17.467: debug: Incrementing serial number in file "./example.net/zone.db" 4732010-08-26 23:56:17.467: debug: Signing zone "example.net." 4742010-08-26 23:56:17.467: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 A876E5 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 4752010-08-26 23:56:17.531: debug: Cmd dnssec-signzone return: "zone.db.signed" 4762010-08-26 23:56:17.531: debug: Signing completed after 0s. 4772010-08-26 23:57:00.178: debug: Check RFC5011 status 4782010-08-26 23:57:00.178: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 4792010-08-26 23:57:00.178: debug: Check KSK status 4802010-08-26 23:57:00.178: debug: Check ZSK status 4812010-08-26 23:57:00.178: debug: Re-signing not necessary! 4822010-08-26 23:57:00.178: debug: Check if there is a parent file to copy 4832010-10-21 14:01:35.546: debug: Check RFC5011 status 4842010-10-21 14:01:35.546: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 4852010-10-21 14:01:35.546: debug: Check KSK status 4862010-10-21 14:01:35.546: debug: Check ZSK status 4872010-10-21 14:01:35.546: debug: Re-signing necessary: re-signing interval (2d) reached 4882010-10-21 14:01:35.546: notice: "example.net.": re-signing triggered: re-signing interval (2d) reached 4892010-10-21 14:01:35.546: debug: Writing key file "./example.net/dnskey.db" 4902010-10-21 14:01:35.607: debug: Incrementing serial number in file "./example.net/zone.db" 4912010-10-21 14:01:35.607: debug: Signing zone "example.net." 4922010-10-21 14:01:35.607: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 9FC981 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 4932010-10-21 14:01:35.761: debug: Cmd dnssec-signzone return: "zone.db.signed" 4942010-10-21 14:01:35.761: debug: Signing completed after 0s. 4952010-10-21 14:02:09.209: debug: Check RFC5011 status 4962010-10-21 14:02:09.209: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 4972010-10-21 14:02:09.209: debug: Check KSK status 4982010-10-21 14:02:09.209: debug: Check ZSK status 4992010-10-21 14:02:09.209: debug: Re-signing not necessary! 5002010-10-21 14:02:09.209: debug: Check if there is a parent file to copy 5012010-10-21 14:05:36.170: debug: Check RFC5011 status 5022010-10-21 14:05:36.170: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 5032010-10-21 14:05:36.170: debug: Check KSK status 5042010-10-21 14:05:36.170: debug: Check ZSK status 5052010-10-21 14:05:36.170: debug: Re-signing not necessary! 5062010-10-21 14:05:36.170: debug: Check if there is a parent file to copy 5072010-10-21 14:30:43.892: debug: Check RFC5011 status 5082010-10-21 14:30:43.892: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 5092010-10-21 14:30:43.892: debug: Check KSK status 5102010-10-21 14:30:43.892: debug: Check ZSK status 5112010-10-21 14:30:43.892: debug: Re-signing not necessary! 5122010-10-21 14:30:43.892: debug: Check if there is a parent file to copy 5132014-11-14 18:04:37.729: debug: Check RFC5011 status 5142014-11-14 18:04:37.729: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 5152014-11-14 18:04:37.729: debug: Check KSK status 5162014-11-14 18:04:37.729: debug: Check ZSK status 5172014-11-14 18:04:37.729: debug: Re-signing necessary: Modified keys 5182014-11-14 18:04:37.729: notice: "example.net.": re-signing triggered: Modified keys 5192014-11-14 18:04:37.729: debug: Writing key file "./example.net/dnskey.db" 5202014-11-14 18:04:37.730: debug: Incrementing serial number in file "./example.net/zone.db" 5212014-11-14 18:04:37.730: debug: Signing zone "example.net." 5222014-11-14 18:04:37.730: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 97195D -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 5232014-11-14 18:04:37.827: debug: Cmd dnssec-signzone return: "zone.db.signed" 5242014-11-14 18:04:37.827: debug: Signing completed after 0s. 5252014-11-14 18:09:16.427: debug: Check RFC5011 status 5262014-11-14 18:09:16.427: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 5272014-11-14 18:09:16.427: debug: Check KSK status 5282014-11-14 18:09:16.428: debug: No active KSK found: generate new one 5292014-11-14 18:09:16.495: info: "example.net.": generated new KSK 44671 5302014-11-14 18:09:16.495: debug: Check ZSK status 5312014-11-14 18:09:16.495: debug: No active ZSK found: generate new one 5322014-11-14 18:09:16.515: info: "example.net.": generated new ZSK 7929 5332014-11-14 18:09:16.515: debug: New key for pre-publishing needed 5342014-11-14 18:09:16.546: debug: ->creating new key 2253 5352014-11-14 18:09:16.546: info: "example.net.": new key 2253 generated for pre-publishing 5362014-11-14 18:09:16.546: debug: Re-signing necessary: Modified zone key set 5372014-11-14 18:09:16.546: notice: "example.net.": re-signing triggered: Modified zone key set 5382014-11-14 18:09:16.547: debug: Writing key file "./example.net/dnskey.db" 5392014-11-14 18:09:16.547: debug: Incrementing serial number in file "./example.net/zone.db" 5402014-11-14 18:09:16.547: debug: Signing zone "example.net." 5412014-11-14 18:09:16.547: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 B26BB7 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 5422014-11-14 18:09:16.646: debug: Cmd dnssec-signzone return: "zone.db.signed" 5432014-11-14 18:09:16.646: debug: Signing completed after 0s. 5442014-11-14 18:11:40.877: debug: Check RFC5011 status 5452014-11-14 18:11:40.877: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 5462014-11-14 18:11:40.877: debug: Check KSK status 5472014-11-14 18:11:40.877: debug: Check ZSK status 5482014-11-14 18:11:40.877: debug: Re-signing not necessary! 5492014-11-14 18:11:40.877: debug: Check if there is a parent file to copy 5502014-11-14 18:11:46.599: debug: Check RFC5011 status 5512014-11-14 18:11:46.599: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 5522014-11-14 18:11:46.599: debug: Check KSK status 5532014-11-14 18:11:46.599: debug: Check ZSK status 5542014-11-14 18:11:46.599: debug: Re-signing not necessary! 5552014-11-14 18:11:46.599: debug: Check if there is a parent file to copy 5562014-11-14 18:15:54.380: debug: Check RFC5011 status 5572014-11-14 18:15:54.380: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 5582014-11-14 18:15:54.380: debug: Check KSK status 5592014-11-14 18:15:54.380: debug: Check ZSK status 5602014-11-14 18:15:54.380: debug: Re-signing not necessary! 5612014-11-14 18:15:54.380: debug: Check if there is a parent file to copy 5622014-11-14 18:31:09.365: debug: Check RFC5011 status 5632014-11-14 18:31:09.365: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 5642014-11-14 18:31:09.365: debug: Check KSK status 5652014-11-14 18:31:09.365: debug: Check ZSK status 5662014-11-14 18:31:09.365: debug: Re-signing necessary: Modified keys 5672014-11-14 18:31:09.365: notice: "example.net.": re-signing triggered: Modified keys 5682014-11-14 18:31:09.365: debug: Writing key file "././example.net/dnskey.db" 5692014-11-14 18:31:09.366: debug: Incrementing serial number in file "././example.net/zone.db" 5702014-11-14 18:31:09.366: debug: Signing zone "example.net." 5712014-11-14 18:31:09.366: debug: Run cmd "cd ././example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 8B4599 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 5722014-11-14 18:31:09.488: debug: Cmd dnssec-signzone return: "zone.db.signed" 5732014-11-14 18:31:09.488: debug: Signing completed after 0s. 5742014-11-14 18:31:27.335: debug: Check RFC5011 status 5752014-11-14 18:31:27.335: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 5762014-11-14 18:31:27.335: debug: Check KSK status 5772014-11-14 18:31:27.335: debug: Check ZSK status 5782014-11-14 18:31:27.335: debug: Re-signing not necessary! 5792014-11-14 18:31:27.335: debug: Check if there is a parent file to copy 5802014-11-14 18:38:16.356: debug: Check RFC5011 status 5812014-11-14 18:38:16.356: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 5822014-11-14 18:38:16.356: debug: Check KSK status 5832014-11-14 18:38:16.356: debug: Check ZSK status 5842014-11-14 18:38:16.356: debug: Re-signing necessary: Modified keys 5852014-11-14 18:38:16.356: notice: "example.net.": re-signing triggered: Modified keys 5862014-11-14 18:38:16.356: debug: Writing key file "././example.net/dnskey.db" 5872014-11-14 18:38:16.356: debug: Incrementing serial number in file "././example.net/zone.db" 5882014-11-14 18:38:16.356: debug: Signing zone "example.net." 5892014-11-14 18:38:16.356: debug: Run cmd "cd ././example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 BEBFB0 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 5902014-11-14 18:38:16.484: debug: Cmd dnssec-signzone return: "zone.db.signed" 5912014-11-14 18:38:16.484: debug: Signing completed after 0s. 5922014-11-15 18:16:50.572: debug: Check RFC5011 status 5932014-11-15 18:16:50.572: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 5942014-11-15 18:16:50.572: debug: Check KSK status 5952014-11-15 18:16:50.572: debug: Check ZSK status 5962014-11-15 18:16:50.573: debug: Re-signing necessary: Modified keys 5972014-11-15 18:16:50.573: notice: "example.net.": re-signing triggered: Modified keys 5982014-11-15 18:16:50.573: debug: Writing key file "././example.net/dnskey.db" 5992014-11-15 18:16:50.573: debug: Incrementing serial number in file "././example.net/zone.db" 6002014-11-15 18:16:50.573: debug: Signing zone "example.net." 6012014-11-15 18:16:50.573: debug: Run cmd "cd ././example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 DC5680 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 6022014-11-15 18:16:50.715: debug: Cmd dnssec-signzone return: "zone.db.signed" 6032014-11-15 18:16:50.715: debug: Signing completed after 0s. 6042014-11-15 18:16:54.202: debug: Check RFC5011 status 6052014-11-15 18:16:54.202: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 6062014-11-15 18:16:54.202: debug: Check KSK status 6072014-11-15 18:16:54.203: debug: Check ZSK status 6082014-11-15 18:16:54.203: debug: Re-signing not necessary! 6092014-11-15 18:16:54.203: debug: Check if there is a parent file to copy 6102014-11-15 18:17:06.919: debug: Check RFC5011 status 6112014-11-15 18:17:06.919: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 6122014-11-15 18:17:06.919: debug: Check KSK status 6132014-11-15 18:17:06.919: debug: Check ZSK status 6142014-11-15 18:17:06.919: debug: Re-signing necessary: Modified keys 6152014-11-15 18:17:06.919: notice: "example.net.": re-signing triggered: Modified keys 6162014-11-15 18:17:06.919: debug: Writing key file "././example.net/dnskey.db" 6172014-11-15 18:17:06.919: debug: Incrementing serial number in file "././example.net/zone.db" 6182014-11-15 18:17:06.919: debug: Signing zone "example.net." 6192014-11-15 18:17:06.919: debug: Run cmd "cd ././example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 D82F90 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 6202014-11-15 18:17:07.040: debug: Cmd dnssec-signzone return: "zone.db.signed" 6212014-11-15 18:17:07.040: debug: Signing completed after 1s. 6222014-11-15 18:17:17.242: debug: Check RFC5011 status 6232014-11-15 18:17:17.242: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 6242014-11-15 18:17:17.242: debug: Check KSK status 6252014-11-15 18:17:17.243: debug: Check ZSK status 6262014-11-15 18:17:17.243: debug: Re-signing necessary: Zone file edited 6272014-11-15 18:17:17.243: notice: "example.net.": re-signing triggered: Zone file edited 6282014-11-15 18:17:17.243: debug: Writing key file "././example.net/dnskey.db" 6292014-11-15 18:17:17.243: debug: Incrementing serial number in file "././example.net/zone.db" 6302014-11-15 18:17:17.243: debug: Signing zone "example.net." 6312014-11-15 18:17:17.243: debug: Run cmd "cd ././example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 603310 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 6322014-11-15 18:17:17.365: debug: Cmd dnssec-signzone return: "zone.db.signed" 6332014-11-15 18:17:17.365: debug: Signing completed after 0s. 6342014-11-17 19:12:44.250: debug: Check RFC5011 status 6352014-11-17 19:12:44.250: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 6362014-11-17 19:12:44.250: debug: Check KSK status 6372014-11-17 19:12:44.250: debug: Check ZSK status 6382014-11-17 19:12:44.250: debug: Re-signing necessary: re-signing interval (2d) reached 6392014-11-17 19:12:44.250: notice: "example.net.": re-signing triggered: re-signing interval (2d) reached 6402014-11-17 19:12:44.250: debug: Writing key file "./example.net/dnskey.db" 6412014-11-17 19:12:44.251: debug: Incrementing serial number in file "./example.net/zone.db" 6422014-11-17 19:12:44.251: debug: Signing zone "example.net." 6432014-11-17 19:12:44.251: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 9F5882 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 6442014-11-17 19:12:44.392: debug: Cmd dnssec-signzone return: "zone.db.signed" 6452014-11-17 19:12:44.392: debug: Signing completed after 0s. 6462014-11-17 19:12:49.692: debug: Check RFC5011 status 6472014-11-17 19:12:49.692: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 6482014-11-17 19:12:49.692: debug: Check KSK status 6492014-11-17 19:12:49.692: debug: Check ZSK status 6502014-11-17 19:12:49.692: debug: Re-signing not necessary! 6512014-11-17 19:12:49.692: debug: Check if there is a parent file to copy 6522014-11-17 19:13:02.603: debug: Check RFC5011 status 6532014-11-17 19:13:02.603: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 6542014-11-17 19:13:02.603: debug: Check KSK status 6552014-11-17 19:13:02.603: debug: Check ZSK status 6562014-11-17 19:13:02.603: debug: Re-signing not necessary! 6572014-11-17 19:13:02.603: debug: Check if there is a parent file to copy 6582014-11-17 19:13:50.410: debug: Check RFC5011 status 6592014-11-17 19:13:50.410: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 6602014-11-17 19:13:50.410: debug: Check KSK status 6612014-11-17 19:13:50.410: debug: Check ZSK status 6622014-11-17 19:13:50.410: debug: Re-signing necessary: Modified keys 6632014-11-17 19:13:50.410: notice: "example.net.": re-signing triggered: Modified keys 6642014-11-17 19:13:50.410: debug: Writing key file "./example.net/dnskey.db" 6652014-11-17 19:13:50.410: debug: Incrementing serial number in file "./example.net/zone.db" 6662014-11-17 19:13:50.410: debug: Signing zone "example.net." 6672014-11-17 19:13:50.411: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 053453 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 6682014-11-17 19:13:50.525: debug: Cmd dnssec-signzone return: "zone.db.signed" 6692014-11-17 19:13:50.525: debug: Signing completed after 0s. 6702014-11-17 19:13:54.302: debug: Check RFC5011 status 6712014-11-17 19:13:54.302: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 6722014-11-17 19:13:54.302: debug: Check KSK status 6732014-11-17 19:13:54.302: debug: Check ZSK status 6742014-11-17 19:13:54.302: debug: Re-signing not necessary! 6752014-11-17 19:13:54.302: debug: Check if there is a parent file to copy 6762014-11-17 19:14:01.846: debug: Check RFC5011 status 6772014-11-17 19:14:01.846: debug: ->not a rfc5011 zone, looking for a regular ksk rollover 6782014-11-17 19:14:01.846: debug: Check KSK status 6792014-11-17 19:14:01.846: debug: Check ZSK status 6802014-11-17 19:14:01.846: debug: Re-signing necessary: Zone file edited 6812014-11-17 19:14:01.846: notice: "example.net.": re-signing triggered: Zone file edited 6822014-11-17 19:14:01.846: debug: Writing key file "./example.net/dnskey.db" 6832014-11-17 19:14:01.846: debug: Incrementing serial number in file "./example.net/zone.db" 6842014-11-17 19:14:01.846: debug: Signing zone "example.net." 6852014-11-17 19:14:01.847: debug: Run cmd "cd ./example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -A -3 7CF530 -C -g -p -d ../keysets -o example.net. -e +518400 zone.db K*.private 2>&1" 6862014-11-17 19:14:01.969: debug: Cmd dnssec-signzone return: "zone.db.signed" 6872014-11-17 19:14:01.969: debug: Signing completed after 0s. 688