Maintained by: NLnet Labs

RFC5011 : 30days add-holddown timer

Daisuke HIGASHI
Wed Aug 16 18:46:05 CEST 2017


Hi,

  In the moment unbound-anchor(8) creates root,key file that contains
new KSK trust anchor as ADDPEND state. Does it take 30 days to update
new key’s state to VALID ?

(If so, new Unbound installation after 11 Sep (30days to the KSK roll)
fail to update trusted sets until KSK roll?)

Regards,
-- 
 Daisuke Higashi