Libor,
You can also trigger KSK roll-overs with knotc
zone-key-rollover
command. In that case, it would proceed with automatic KSK roll-over,
including DS submission etc.
Right, but that won't REVOKE the old key I think, and if it does, how can I
specify for how long the revoked key (flags 385) is kept in the zone?
-JP