After switching to "dnssec-policy", existing RRs are still signed with the "old" ZSK

Tom lists at verreckte-cheib.ch
Wed May 11 11:12:18 UTC 2022



On 11.05.22 11:26, Mark Andrews wrote:
> Signature-refresh determines when the RRSIGs will be replaced by looking at the expiration time and working backwards. New RRSIGs are generate Using signature-interval.
> 
Ah, perfect. Thx.


More information about the bind-users mailing list