dnssec: add KEY_SUBMISSION entry with keytag value to key submission log

src/knot/events/handlers/dnssec.c

@@ -43,7 +43,6 @@ void event_dnssec_reschedule(conf_t *conf, zone_t *zone,
 	log_dnssec_next(zone->name, (time_t)refresh_at);
 
 	if (refresh->plan_ds_query) {
-		log_zone_notice(zone->name, "DNSSEC, KSK submission, waiting for confirmation");
 		zone->timers.next_parent_ds_q = now;
 	}
 

src/knot/events/handlers/parent_ds_query.c

@@ -14,6 +14,7 @@
     along with this program.  If not, see <http://www.gnu.org/licenses/>.
  */
 
+#include "knot/common/log.h"
 #include "knot/dnssec/ds_query.h"
 #include "knot/zone/zone.h"
 
@@ -33,6 +34,18 @@ int event_parent_ds_q(conf_t *conf, zone_t *zone)
 		return ret;
 	}
 
+	for (size_t i = 0; i < keyset.count; i++) {
+		zone_key_t *key = &keyset.keys[i];
+		if (key->is_ksk && key->cds_priority > 1) {
+			char param[32];
+			(void)snprintf(param, sizeof(param), "KEY_SUBMISSION=%hu",
+			               dnssec_key_get_keytag(key->key));
+
+			log_fmt_zone(LOG_NOTICE, LOG_SOURCE_ZONE, zone->name, param,
+			             "DNSSEC, KSK submission, waiting for confirmation");
+		}
+	}
+
 	ret = knot_parent_ds_query(&ctx, &keyset, conf->cache.srv_tcp_reply_timeout * 1000);
 
 	zone->timers.next_parent_ds_q = 0;