2010-10-21 14:01:35.486: debug: Check RFC5011 status

2010-10-21 14:01:35.486: debug: ->not a rfc5011 zone, looking for a regular ksk rollover

2010-10-21 14:01:35.486: debug: Check KSK status

2010-10-21 14:01:35.486: debug: Check ZSK status

2010-10-21 14:01:35.486: debug: No active ZSK found: generate new one

2010-10-21 14:01:35.495: error: sub.example.net.": can't generate new ZSK

2010-10-21 14:01:35.495: debug: Re-signing necessary: Modfied zone key set

2010-10-21 14:01:35.496: notice: "sub.example.net.": re-signing triggered: Modfied zone key set

2010-10-21 14:01:35.496: debug: Writing key file "./sub.example.net/dnskey.db"

2010-10-21 14:01:35.496: debug: Incrementing serial number in file "./sub.example.net/zone.db"

2010-10-21 14:01:35.496: debug: Signing zone "sub.example.net."

2010-10-21 14:01:35.496: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -3 9FC981 -C -g -p -d ../keysets -o sub.example.net. -e +172800 zone.db K*.private 2>&1"

2010-10-21 14:01:35.546: debug: Cmd dnssec-signzone return: "dnssec-signzone: fatal: DNSSEC completeness test failed."

2010-10-21 14:01:35.546: error: "sub.example.net.": signing failed!

2010-10-21 14:02:09.146: debug: Check RFC5011 status

2010-10-21 14:02:09.146: debug: ->not a rfc5011 zone, looking for a regular ksk rollover

2010-10-21 14:02:09.146: debug: Check KSK status

2010-10-21 14:02:09.146: debug: Check ZSK status

2010-10-21 14:02:09.146: debug: No active ZSK found: generate new one

2010-10-21 14:02:09.156: error: sub.example.net.": can't generate new ZSK

2010-10-21 14:02:09.156: debug: Re-signing necessary: Modified keys

2010-10-21 14:02:09.156: notice: "sub.example.net.": re-signing triggered: Modified keys

2010-10-21 14:02:09.156: debug: Writing key file "./sub.example.net/dnskey.db"

2010-10-21 14:02:09.157: debug: Incrementing serial number in file "./sub.example.net/zone.db"

2010-10-21 14:02:09.157: debug: Signing zone "sub.example.net."

2010-10-21 14:02:09.157: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -3 BD326D -C -g -p -d ../keysets -o sub.example.net. -e +172800 zone.db K*.private 2>&1"

2010-10-21 14:02:09.208: debug: Cmd dnssec-signzone return: "dnssec-signzone: fatal: DNSSEC completeness test failed."

2010-10-21 14:02:09.208: error: "sub.example.net.": signing failed!

2010-10-21 14:05:35.988: debug: Check RFC5011 status

2010-10-21 14:05:35.988: debug: ->not a rfc5011 zone, looking for a regular ksk rollover

2010-10-21 14:05:35.988: debug: Check KSK status

2010-10-21 14:05:35.988: debug: Check ZSK status

2010-10-21 14:05:35.988: debug: No active ZSK found: generate new one

2010-10-21 14:05:36.091: info: "sub.example.net.": generated new ZSK 7987

2010-10-21 14:05:36.091: debug: Re-signing necessary: Modfied zone key set

2010-10-21 14:05:36.091: notice: "sub.example.net.": re-signing triggered: Modfied zone key set

2010-10-21 14:05:36.091: debug: Writing key file "./sub.example.net/dnskey.db"

2010-10-21 14:05:36.091: debug: Incrementing serial number in file "./sub.example.net/zone.db"

2010-10-21 14:05:36.091: debug: Signing zone "sub.example.net."

2010-10-21 14:05:36.091: debug: Run cmd "cd ./sub.example.net; /usr/local/sbin/dnssec-signzone -n 1 -u -3 75DE06 -C -g -p -d ../keysets -o sub.example.net. -e +172800 zone.db K*.private 2>&1"

2010-10-21 14:05:36.170: debug: Cmd dnssec-signzone return: "zone.db.signed"

2010-10-21 14:05:36.170: debug: Signing completed after 0s.

2010-10-21 14:30:43.892: debug: Check RFC5011 status

2010-10-21 14:30:43.892: debug: ->not a rfc5011 zone, looking for a regular ksk rollover

2010-10-21 14:30:43.892: debug: Check KSK status

2010-10-21 14:30:43.892: debug: Check ZSK status

2010-10-21 14:30:43.892: debug: Re-signing not necessary!

2010-10-21 14:30:43.892: debug: Check if there is a parent file to copy