Active ksk shouldn't go to retire state immediately after issuing rol…

…lover command
opendnssec · Apr 11, 2016 · cf97d4e · cf97d4e
1 parent 07c587c
commit cf97d4e
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/enforcer/src/keystate/keystate_list_cmd.c b/enforcer/src/keystate/keystate_list_cmd.c
@@ -75,6 +75,7 @@ keystate(int p, int c, int introducing, int dsseen)
 		/* retire conforms better to 1.4 terminology than dead. */
 		if (p == HID && c == HID) return KS_RET; /* dead */
 		if (p == UNR || c == UNR) return KS_RET;
+		if (p == RUM && dsseen && c == OMN) return KS_ACT;              
 		if (p == OMN && c == OMN) return KS_ACT;
 		return KS_RET;
 	}