[minix.git] / external / bsd / bind / dist / contrib / zkt-1.1.3 / examples / flat / sub.example.net / zktlog-sub.example.net.
| blob | 709d18e1170775bea9409015d55070563e086a5c |
1 2010-10-21 14:01:35.486: debug: Check RFC5011 status
2 2010-10-21 14:01:35.486: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
3 2010-10-21 14:01:35.486: debug: Check KSK status
4 2010-10-21 14:01:35.486: debug: Check ZSK status
5 2010-10-21 14:01:35.486: debug: No active ZSK found: generate new one
6 2010-10-21 14:01:35.495: error: sub.example.net.": can't generate new ZSK
7 2010-10-21 14:01:35.495: debug: Re-signing necessary: Modfied zone key set
8 2010-10-21 14:01:35.496: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
9 2010-10-21 14:01:35.496: debug: Writing key file "./sub.example.net/dnskey.db"
10 2010-10-21 14:01:35.496: debug: Incrementing serial number in file "./sub.example.net/zone.db"
11 2010-10-21 14:01:35.496: debug: Signing zone "sub.example.net."
12 2010-10-21 14:01:35.496: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -3 9FC981 -C -g -p -d ../keysets -o sub.example.net. -e +172800 zone.db K*.private 2>&1"
13 2010-10-21 14:01:35.546: debug: Cmd dnssec-signzone return: "dnssec-signzone: fatal: DNSSEC completeness test failed."
14 2010-10-21 14:01:35.546: error: "sub.example.net.": signing failed!
15 2010-10-21 14:02:09.146: debug: Check RFC5011 status
16 2010-10-21 14:02:09.146: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
17 2010-10-21 14:02:09.146: debug: Check KSK status
18 2010-10-21 14:02:09.146: debug: Check ZSK status
19 2010-10-21 14:02:09.146: debug: No active ZSK found: generate new one
20 2010-10-21 14:02:09.156: error: sub.example.net.": can't generate new ZSK
21 2010-10-21 14:02:09.156: debug: Re-signing necessary: Modified keys
22 2010-10-21 14:02:09.156: notice: "sub.example.net.": re-signing triggered: Modified keys
23 2010-10-21 14:02:09.156: debug: Writing key file "./sub.example.net/dnskey.db"
24 2010-10-21 14:02:09.157: debug: Incrementing serial number in file "./sub.example.net/zone.db"
25 2010-10-21 14:02:09.157: debug: Signing zone "sub.example.net."
26 2010-10-21 14:02:09.157: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -3 BD326D -C -g -p -d ../keysets -o sub.example.net. -e +172800 zone.db K*.private 2>&1"
27 2010-10-21 14:02:09.208: debug: Cmd dnssec-signzone return: "dnssec-signzone: fatal: DNSSEC completeness test failed."
28 2010-10-21 14:02:09.208: error: "sub.example.net.": signing failed!
29 2010-10-21 14:05:35.988: debug: Check RFC5011 status
30 2010-10-21 14:05:35.988: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
31 2010-10-21 14:05:35.988: debug: Check KSK status
32 2010-10-21 14:05:35.988: debug: Check ZSK status
33 2010-10-21 14:05:35.988: debug: No active ZSK found: generate new one
34 2010-10-21 14:05:36.091: info: "sub.example.net.": generated new ZSK 7987
35 2010-10-21 14:05:36.091: debug: Re-signing necessary: Modfied zone key set
36 2010-10-21 14:05:36.091: notice: "sub.example.net.": re-signing triggered: Modfied zone key set
37 2010-10-21 14:05:36.091: debug: Writing key file "./sub.example.net/dnskey.db"
38 2010-10-21 14:05:36.091: debug: Incrementing serial number in file "./sub.example.net/zone.db"
39 2010-10-21 14:05:36.091: debug: Signing zone "sub.example.net."
40 2010-10-21 14:05:36.091: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -3 75DE06 -C -g -p -d ../keysets -o sub.example.net. -e +172800 zone.db K*.private 2>&1"
41 2010-10-21 14:05:36.170: debug: Cmd dnssec-signzone return: "zone.db.signed"
42 2010-10-21 14:05:36.170: debug: Signing completed after 0s.
43 2010-10-21 14:30:43.892: debug: Check RFC5011 status
44 2010-10-21 14:30:43.892: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
45 2010-10-21 14:30:43.892: debug: Check KSK status
46 2010-10-21 14:30:43.892: debug: Check ZSK status
47 2010-10-21 14:30:43.892: debug: Re-signing not necessary!
48 2010-10-21 14:30:43.892: debug: Check if there is a parent file to copy
49 2014-11-14 18:04:37.686: debug: Check RFC5011 status
50 2014-11-14 18:04:37.686: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
51 2014-11-14 18:04:37.686: debug: Check KSK status
52 2014-11-14 18:04:37.686: warning: "sub.example.net.": lifetime of key signing key 33176 exceeded since 4d8h26m2s
53 2014-11-14 18:04:37.686: debug: Check ZSK status
54 2014-11-14 18:04:37.686: debug: Lifetime(259200 +/-150 sec) of active key 7987 exceeded (980762 sec)
55 2014-11-14 18:04:37.686: debug: ->waiting for published key
56 2014-11-14 18:04:37.686: notice: "sub.example.net.": lifetime of zone signing key 7987 exceeded since 1w1d8h26m2s: ZSK rollover deferred: waiting for published key
57 2014-11-14 18:04:37.686: debug: New ZSK for publishing needed
58 2014-11-14 18:04:37.721: debug: ->creating new key 39632
59 2014-11-14 18:04:37.721: info: "sub.example.net.": new zone signing key 39632 generated for publishing
60 2014-11-14 18:04:37.721: debug: Re-signing necessary: Modified zone key set
61 2014-11-14 18:04:37.721: notice: "sub.example.net.": re-signing triggered: Modified zone key set
62 2014-11-14 18:04:37.721: debug: Writing key file "./sub.example.net/dnskey.db"
63 2014-11-14 18:04:37.721: debug: Incrementing serial number in file "./sub.example.net/zone.db"
64 2014-11-14 18:04:37.721: debug: Signing zone "sub.example.net."
65 2014-11-14 18:04:37.722: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -3 97195D -C -g -p -d ../keysets -o sub.example.net. -e +172800 zone.db K*.private 2>&1"
66 2014-11-14 18:04:37.729: debug: Cmd dnssec-signzone return: "dnssec-signzone: fatal: NSEC3 generation requested with NSEC-only DNSKEY"
67 2014-11-14 18:04:37.729: error: "sub.example.net.": signing failed!
68 2014-11-14 18:09:16.251: debug: Check RFC5011 status
69 2014-11-14 18:09:16.251: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
70 2014-11-14 18:09:16.251: debug: Check KSK status
71 2014-11-14 18:09:16.251: debug: No active KSK found: generate new one
72 2014-11-14 18:09:16.288: info: "sub.example.net.": generated new KSK 60396
73 2014-11-14 18:09:16.288: debug: Check ZSK status
74 2014-11-14 18:09:16.288: debug: No active ZSK found: generate new one
75 2014-11-14 18:09:16.329: info: "sub.example.net.": generated new ZSK 21503
76 2014-11-14 18:09:16.329: debug: Re-signing necessary: Modified zone key set
77 2014-11-14 18:09:16.329: notice: "sub.example.net.": re-signing triggered: Modified zone key set
78 2014-11-14 18:09:16.329: debug: Writing key file "./sub.example.net/dnskey.db"
79 2014-11-14 18:09:16.330: debug: Incrementing serial number in file "./sub.example.net/zone.db"
80 2014-11-14 18:09:16.330: debug: Signing zone "sub.example.net."
81 2014-11-14 18:09:16.330: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -3 B26BB7 -C -g -p -d ../keysets -o sub.example.net. -e +172800 zone.db K*.private 2>&1"
82 2014-11-14 18:09:16.427: debug: Cmd dnssec-signzone return: "zone.db.signed"
83 2014-11-14 18:09:16.427: debug: Signing completed after 0s.
84 2014-11-14 18:11:40.699: debug: Check RFC5011 status
85 2014-11-14 18:11:40.699: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
86 2014-11-14 18:11:40.699: debug: Check KSK status
87 2014-11-14 18:11:40.699: debug: Check ZSK status
88 2014-11-14 18:11:40.699: debug: Re-signing necessary: Modified keys
89 2014-11-14 18:11:40.699: notice: "sub.example.net.": re-signing triggered: Modified keys
90 2014-11-14 18:11:40.699: debug: Writing key file "././sub.example.net/dnskey.db"
91 2014-11-14 18:11:40.699: debug: Incrementing serial number in file "././sub.example.net/zone.db"
92 2014-11-14 18:11:40.699: debug: Signing zone "sub.example.net."
93 2014-11-14 18:11:40.699: debug: Run cmd "cd ././sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -3 E8CBA9 -C -g -p -d ../keysets -o sub.example.net. -e +172800 zone.db K*.private 2>&1"
94 2014-11-14 18:11:40.876: debug: Cmd dnssec-signzone return: "zone.db.signed"
95 2014-11-14 18:11:40.876: debug: Signing completed after 0s.
96 2014-11-14 18:11:46.599: debug: Check RFC5011 status
97 2014-11-14 18:11:46.599: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
98 2014-11-14 18:11:46.599: debug: Check KSK status
99 2014-11-14 18:11:46.599: debug: Check ZSK status
100 2014-11-14 18:11:46.599: debug: Re-signing not necessary!
101 2014-11-14 18:11:46.599: debug: Check if there is a parent file to copy
102 2014-11-14 18:15:54.379: debug: Check RFC5011 status
103 2014-11-14 18:15:54.379: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
104 2014-11-14 18:15:54.379: debug: Check KSK status
105 2014-11-14 18:15:54.379: debug: Check ZSK status
106 2014-11-14 18:15:54.379: debug: Re-signing not necessary!
107 2014-11-14 18:15:54.379: debug: Check if there is a parent file to copy
108 2014-11-14 18:31:09.365: debug: Check RFC5011 status
109 2014-11-14 18:31:09.365: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
110 2014-11-14 18:31:09.365: debug: Check KSK status
111 2014-11-14 18:31:09.365: debug: Check ZSK status
112 2014-11-14 18:31:09.365: debug: Re-signing not necessary!
113 2014-11-14 18:31:09.365: debug: Check if there is a parent file to copy
114 2014-11-14 18:31:27.335: debug: Check RFC5011 status
115 2014-11-14 18:31:27.335: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
116 2014-11-14 18:31:27.335: debug: Check KSK status
117 2014-11-14 18:31:27.335: debug: Check ZSK status
118 2014-11-14 18:31:27.335: debug: Re-signing not necessary!
119 2014-11-14 18:31:27.335: debug: Check if there is a parent file to copy
120 2014-11-14 18:38:16.355: debug: Check RFC5011 status
121 2014-11-14 18:38:16.355: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
122 2014-11-14 18:38:16.355: debug: Check KSK status
123 2014-11-14 18:38:16.355: debug: Check ZSK status
124 2014-11-14 18:38:16.355: debug: Re-signing not necessary!
125 2014-11-14 18:38:16.356: debug: Check if there is a parent file to copy
126 2014-11-15 18:16:50.447: debug: Check RFC5011 status
127 2014-11-15 18:16:50.447: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
128 2014-11-15 18:16:50.447: debug: Check KSK status
129 2014-11-15 18:16:50.447: debug: Check ZSK status
130 2014-11-15 18:16:50.447: debug: Re-signing necessary: re-signing interval (1d) reached
131 2014-11-15 18:16:50.447: notice: "sub.example.net.": re-signing triggered: re-signing interval (1d) reached
132 2014-11-15 18:16:50.447: debug: Writing key file "././sub.example.net/dnskey.db"
133 2014-11-15 18:16:50.447: debug: Incrementing serial number in file "././sub.example.net/zone.db"
134 2014-11-15 18:16:50.447: debug: Signing zone "sub.example.net."
135 2014-11-15 18:16:50.448: debug: Run cmd "cd ././sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -3 DC5680 -C -g -p -d ../keysets -o sub.example.net. -e +172800 zone.db K*.private 2>&1"
136 2014-11-15 18:16:50.572: debug: Cmd dnssec-signzone return: "zone.db.signed"
137 2014-11-15 18:16:50.572: debug: Signing completed after 0s.
138 2014-11-15 18:16:54.202: debug: Check RFC5011 status
139 2014-11-15 18:16:54.202: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
140 2014-11-15 18:16:54.202: debug: Check KSK status
141 2014-11-15 18:16:54.202: debug: Check ZSK status
142 2014-11-15 18:16:54.202: debug: Re-signing not necessary!
143 2014-11-15 18:16:54.202: debug: Check if there is a parent file to copy
144 2014-11-15 18:17:06.918: debug: Check RFC5011 status
145 2014-11-15 18:17:06.918: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
146 2014-11-15 18:17:06.918: debug: Check KSK status
147 2014-11-15 18:17:06.918: debug: Check ZSK status
148 2014-11-15 18:17:06.918: debug: Re-signing not necessary!
149 2014-11-15 18:17:06.918: debug: Check if there is a parent file to copy
150 2014-11-15 18:17:17.242: debug: Check RFC5011 status
151 2014-11-15 18:17:17.242: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
152 2014-11-15 18:17:17.242: debug: Check KSK status
153 2014-11-15 18:17:17.242: debug: Check ZSK status
154 2014-11-15 18:17:17.242: debug: Re-signing not necessary!
155 2014-11-15 18:17:17.242: debug: Check if there is a parent file to copy
156 2014-11-17 19:12:44.029: debug: Check RFC5011 status
157 2014-11-17 19:12:44.029: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
158 2014-11-17 19:12:44.029: debug: Check KSK status
159 2014-11-17 19:12:44.029: debug: Check ZSK status
160 2014-11-17 19:12:44.029: debug: Lifetime(259200 +/-150 sec) of active key 21503 exceeded (263008 sec)
161 2014-11-17 19:12:44.029: debug: ->waiting for published key
162 2014-11-17 19:12:44.029: notice: "sub.example.net.": lifetime of zone signing key 21503 exceeded since 1h3m28s: ZSK rollover deferred: waiting for published key
163 2014-11-17 19:12:44.029: debug: New ZSK for publishing needed
164 2014-11-17 19:12:44.110: debug: ->creating new key 53867
165 2014-11-17 19:12:44.110: info: "sub.example.net.": new zone signing key 53867 generated for publishing
166 2014-11-17 19:12:44.110: debug: Re-signing necessary: Modified zone key set
167 2014-11-17 19:12:44.110: notice: "sub.example.net.": re-signing triggered: Modified zone key set
168 2014-11-17 19:12:44.110: debug: Writing key file "./sub.example.net/dnskey.db"
169 2014-11-17 19:12:44.111: debug: Incrementing serial number in file "./sub.example.net/zone.db"
170 2014-11-17 19:12:44.111: debug: Signing zone "sub.example.net."
171 2014-11-17 19:12:44.111: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -3 9F5882 -C -g -p -d ../keysets -o sub.example.net. -e +172800 zone.db K*.private 2>&1"
172 2014-11-17 19:12:44.250: debug: Cmd dnssec-signzone return: "zone.db.signed"
173 2014-11-17 19:12:44.250: debug: Signing completed after 0s.
174 2014-11-17 19:12:49.691: debug: Check RFC5011 status
175 2014-11-17 19:12:49.691: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
176 2014-11-17 19:12:49.691: debug: Check KSK status
177 2014-11-17 19:12:49.691: debug: Check ZSK status
178 2014-11-17 19:12:49.691: debug: Lifetime(259200 +/-150 sec) of active key 21503 exceeded (263013 sec)
179 2014-11-17 19:12:49.691: debug: ->waiting for published key
180 2014-11-17 19:12:49.691: notice: "sub.example.net.": lifetime of zone signing key 21503 exceeded since 1h3m33s: ZSK rollover deferred: waiting for published key
181 2014-11-17 19:12:49.692: debug: Re-signing not necessary!
182 2014-11-17 19:12:49.692: debug: Check if there is a parent file to copy
183 2014-11-17 19:13:02.603: debug: Check RFC5011 status
184 2014-11-17 19:13:02.603: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
185 2014-11-17 19:13:02.603: debug: Check KSK status
186 2014-11-17 19:13:02.603: debug: Check ZSK status
187 2014-11-17 19:13:02.603: debug: Lifetime(259200 +/-150 sec) of active key 21503 exceeded (263026 sec)
188 2014-11-17 19:13:02.603: debug: ->waiting for published key
189 2014-11-17 19:13:02.603: notice: "sub.example.net.": lifetime of zone signing key 21503 exceeded since 1h3m46s: ZSK rollover deferred: waiting for published key
190 2014-11-17 19:13:02.603: debug: Re-signing not necessary!
191 2014-11-17 19:13:02.603: debug: Check if there is a parent file to copy
192 2014-11-17 19:13:50.409: debug: Check RFC5011 status
193 2014-11-17 19:13:50.409: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
194 2014-11-17 19:13:50.409: debug: Check KSK status
195 2014-11-17 19:13:50.409: debug: Check ZSK status
196 2014-11-17 19:13:50.409: debug: Lifetime(259200 +/-150 sec) of active key 21503 exceeded (263074 sec)
197 2014-11-17 19:13:50.409: debug: ->waiting for published key
198 2014-11-17 19:13:50.409: notice: "sub.example.net.": lifetime of zone signing key 21503 exceeded since 1h4m34s: ZSK rollover deferred: waiting for published key
199 2014-11-17 19:13:50.409: debug: Re-signing not necessary!
200 2014-11-17 19:13:50.409: debug: Check if there is a parent file to copy
201 2014-11-17 19:13:54.302: debug: Check RFC5011 status
202 2014-11-17 19:13:54.302: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
203 2014-11-17 19:13:54.302: debug: Check KSK status
204 2014-11-17 19:13:54.302: debug: Check ZSK status
205 2014-11-17 19:13:54.302: debug: Lifetime(259200 +/-150 sec) of active key 21503 exceeded (263078 sec)
206 2014-11-17 19:13:54.302: debug: ->waiting for published key
207 2014-11-17 19:13:54.302: notice: "sub.example.net.": lifetime of zone signing key 21503 exceeded since 1h4m38s: ZSK rollover deferred: waiting for published key
208 2014-11-17 19:13:54.302: debug: Re-signing not necessary!
209 2014-11-17 19:13:54.302: debug: Check if there is a parent file to copy
210 2014-11-17 19:14:01.845: debug: Check RFC5011 status
211 2014-11-17 19:14:01.846: debug: ->not a rfc5011 zone, looking for a regular ksk rollover
212 2014-11-17 19:14:01.846: debug: Check KSK status
213 2014-11-17 19:14:01.846: debug: Check ZSK status
214 2014-11-17 19:14:01.846: debug: Lifetime(259200 +/-150 sec) of active key 21503 exceeded (263085 sec)
215 2014-11-17 19:14:01.846: debug: ->waiting for published key
216 2014-11-17 19:14:01.846: notice: "sub.example.net.": lifetime of zone signing key 21503 exceeded since 1h4m45s: ZSK rollover deferred: waiting for published key
217 2014-11-17 19:14:01.846: debug: Re-signing not necessary!
218 2014-11-17 19:14:01.846: debug: Check if there is a parent file to copy