more flexible serial number handling in dnssec-signzone

Niobos niobos at dest-unreach.be
Fri Oct 15 19:01:49 UTC 2010


On 2010-10-15 20:23, Jukka Pakkanen wrote:
>  15.10.2010 20:54, Niobos kirjoitti:
>> What's the advantage of using a date anyway? I too can see when a zone
>> was last edited, even down to the second, by watching the RRSIG(SOA)
>> timing.
> 
> Time usually goes to one direction only, forward... so using date/time
> makes sure you are always incrementing the serial. And you even don't
> need to know the current serial to update it.
If that's the reason, dnssec-signzone already supports this: -N unixtime

Niobos




More information about the bind-users mailing list