DNSSEC and upgrading/restoring

[Tony Finch]

David Newman <dnewman at networktest.com> wrote:
>
> 2. For five domains, the log contains signature-has-expired warnings.
>
> In all five cases, these are for NSEC3PARAM records.
>
> Is any action needed on my part, for example manually doing NSEC3
> signing of these zones?

See if named has already re-signed them - check that the first date in the
RRSIG is in the future.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Forties, Cromarty: East, veering southeast, 4 or 5, occasionally 6 at first.
Rough, becoming slight or moderate. Showers, rain at first. Moderate or good,
occasionally poor at first.