Refresh of the .signed DNSSEC file?
Alan Clegg
alan at clegg.com
Sat Feb 2 13:34:54 UTC 2019
On 2/2/19 7:54 AM, @lbutlr wrote:
> Based having update-policy local; auto-dnssec maintain; in the zone,
> when I make changed to example.com I was expecting that
> example.com.signed will be refreshed.
>
> This doesn’t seem to be happening.
>
> I just went through several domains and changed the serial number and
> removed an old subdomain (ftp) from them, did an rndc reload, and …
> nothing.
>
Since you are using "update-policy local;", when you make changes with
"nsupdate -l", does the right thing happen?
AlanC
More information about the bind-users
mailing list