auto RRSIG enable
Nyamkhand Buluukhuu
nyamkhand at mobicom.mn
Mon Nov 2 06:20:54 UTC 2020
Hello,
Yes you can define below configurations in your options:
inline-signing yes;
This configuration automates your signing zone tasks as whenever you change, add, delete your records or signature expired, named automatically re-sign your zone data with the keys in your key-directory.
auto-dnssec maintain;
This is for the automated key management. With this option enabled, named will periodically check if there are new key available, or expired key and manage DNSKEY records. It's very helpful when you renew your keys.
Have a nice day :)
BR, NYAMKHAND Buluukhuu
Engineer
TPD/ETSD
UNESCO street - 28, MPM Complex
Ulaanbaatar -14220, Mongolia
Mobile: (976) 94081017
Web: www.mobicom.mn<http://www.newcom.mn/>
Before you start - Be safety smart
[cid:a4d66a69-69bf-434d-842c-f5bc1739cc6c]
________________________________
From: bind-users <bind-users-bounces at lists.isc.org> on behalf of rams <bramesh80 at gmail.com>
Sent: Monday, November 2, 2020 2:14 PM
To: bind-users <bind-users at isc.org>
Subject: auto RRSIG enable
Hi,
Do we need to set any option in named.conf for auto RRSIG generation in bind?
Can anyone help me on this.
Regards,
Ramesh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20201102/59389530/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-seznrd2m.png
Type: image/png
Size: 39408 bytes
Desc: Outlook-seznrd2m.png
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20201102/59389530/attachment-0001.png>
More information about the bind-users
mailing list