key rollover when keyname present

Cantor, Scott cantor.2 at osu.edu
Mon Aug 14 12:21:15 EDT 2017


> step or will duplicate keynames cause issues
> elsewhere ?

I would expect it to break, since the whole point of the key name is to identify which keypair to use. I don't know what it does, probably something unspecified or difficult to predict.

You shouldn't need to do that. The additional key shouldn't be used in any capacity that overlaps with the old at any given time. The new key is put into the metadata for signing only but not used yet, and into the config for encryption only (and doesn't need to be named).
 
-- Scott



More information about the users mailing list