• Evan Hunt's avatar
    2677. [func] Changes to key metadata behavior: · b843f577
    Evan Hunt authored
    			- Keys without "publish" or "active" dates set will
    			  no longer be used for smart signing.  However,
    			  those dates will be set to "now" by default when
    			  a key is created; to generate a key but not use
    			  it yet, use dnssec-keygen -G.
    			- New "inactive" date (dnssec-keygen/settime -I)
    			  sets the time when a key is no longer used for
    			  signing but is still published.
    			- The "unpublished" date (-U) is deprecated in
    			  favor of "deleted" (-D).
dnssec-keygen.docbook 18.8 KB