Commit 69a873e9 authored by Daniel Salzman's avatar Daniel Salzman

dnssec: add KEY_SUBMISSION entry with keytag value to key submission log

parent 0e732748
......@@ -43,7 +43,6 @@ void event_dnssec_reschedule(conf_t *conf, zone_t *zone,
log_dnssec_next(zone->name, (time_t)refresh_at);
if (refresh->plan_ds_query) {
log_zone_notice(zone->name, "DNSSEC, KSK submission, waiting for confirmation");
zone->timers.next_parent_ds_q = now;
}
......
......@@ -14,6 +14,7 @@
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
#include "knot/common/log.h"
#include "knot/dnssec/ds_query.h"
#include "knot/zone/zone.h"
......@@ -33,6 +34,18 @@ int event_parent_ds_q(conf_t *conf, zone_t *zone)
return ret;
}
for (size_t i = 0; i < keyset.count; i++) {
zone_key_t *key = &keyset.keys[i];
if (key->is_ksk && key->cds_priority > 1) {
char param[32];
(void)snprintf(param, sizeof(param), "KEY_SUBMISSION=%hu",
dnssec_key_get_keytag(key->key));
log_fmt_zone(LOG_NOTICE, LOG_SOURCE_ZONE, zone->name, param,
"DNSSEC, KSK submission, waiting for confirmation");
}
}
ret = knot_parent_ds_query(&ctx, &keyset, conf->cache.srv_tcp_reply_timeout * 1000);
zone->timers.next_parent_ds_q = 0;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment