Activation/inactivation is when named starts/stops signing with the key. Inception/expiratioin is the time perion for which the signature is valid.
These are different time periods and are basically unrelated.
The inception will be < inactivation. The expiratin will be > activation.
After a key is activated it will be used to sign records that change. The sig-validity-interval (less a small random factor) is used to determine for how long a signature is valid for.
Mark
In message 14b292cc598.2743.14d9188d684ea7b6d1324cf92af46b48@klam.ca, John writes:
oops!! I swapped the ZSK and KSK in the table.
On January 26, 2015 9:09:40 PM John john@klam.ca wrote:
my experimental zone (the family site) klam.ca has a KSK and a ZSK. There appear to be time differences between the records reported by DIG and the source records on file. In the case of the ZSK the inactive date-time is a few hours different, but in the ZSKs case it is 3 months.
Is this a problem, and if so what do I do about it.
The following dates were found in the source record and the output from dig.
source record dig KSK -A 20150126163534 20150117012252 KSK -I 20150225173534 20150225144654
ZSK -A 20150126163534 20150126173534 ZSK -I 20150527015028 20150225173534
-- John Allen KLaM
If you are out to describe the truth, leave elegance to the tailor.
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
------------14b292ccdd3902274342ea2c58 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: 8bit
<html> <head>
</head> <body> <div style="color: black;"> <div style="color: black;"> <p style="margin: 0 0 1em 0; color: black;">oops!! I swapped the ZSK and KSK in the table.</p> </div> <div style="color: black;"> <p style="color: black; font-size: 10pt; font-family: Arial, sans-serif; margin: 10pt 0;">On January 26, 2015 9:09:40 PM John <john@klam.ca> wrote:</p> <blockquote type="cite" class="gmail_quote" style="margin: 0 0 0 0.75ex; border-left: 1px solid #808080; padding-left: 0.75ex;"> <div class="moz-signature">my experimental zone (the family site) klam.ca has a KSK and a ZSK. <br> There appear to be time differences between the records reported by DIG and the source records on file. <br> In the case of the ZSK the inactive date-time is a few hours different, but in the ZSKs case it is 3 months.<br> <br> Is this a problem, and if so what do I do about it.<br> <br> The following dates were found in the source record and the output from dig.<br> <table border="1" cellpadding="2" cellspacing="2" width="100%"> <tbody> <tr> <td valign="top"><br> </td> <td align="center" valign="top">source record </td> <td align="center" valign="top">dig<br> </td> </tr> <tr> <td valign="top">KSK -A <br> </td> <td align="center" valign="top">20150126163534 </td> <td align="center" valign="top">20150117012252<br> </td> </tr> <tr> <td valign="top">KSK -I<br> </td> <td align="center" valign="top">20150225173534<br> </td> <td align="center" valign="top">20150225144654<br> </td> </tr> <tr> <td valign="top"><br> </td> <td valign="top"><br> </td> <td valign="top"><br> </td> </tr> <tr> <td valign="top">ZSK -A<br> </td> <td align="center" valign="top">20150126163534<br> </td> <td align="center" valign="top">20150126173534</td> </tr> <tr> <td valign="top">ZSK -I<br> </td> <td align="center" valign="top">20150527015028<br> </td> <td align="center" valign="top">20150225173534<br> </td> </tr> </tbody> </table> <br> <br> -- <br> John Allen<br> KLaM<br> ------------------------------------------<br> If you are out to describe the truth, leave elegance to the tailor. </div>
_______________________________________________<br> Please visit <a class="aqm-autolink aqm-autowrap" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br> bind-users mailing list<br> bind-users@lists.isc.org<br> <a class="aqm-autolink aqm-autowrap" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a><br></blockquote> </div> </div> </body> </html>
------------14b292ccdd3902274342ea2c58--
--===============0592810492330139115== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users --===============0592810492330139115==--