Refresh of the .signed DNSSEC file?

Alan Clegg alan at clegg.com
Sat Feb 2 13:34:54 UTC 2019


On 2/2/19 7:54 AM, @lbutlr wrote:
> Based having update-policy local; auto-dnssec maintain; in the zone,
> when I make changed to example.com I was expecting that
> example.com.signed will be refreshed.
> 
> This doesn’t seem to be happening.
> 
> I just went through several domains and changed the serial number and
> removed an old subdomain (ftp) from them, did an rndc reload, and …
> nothing.
> 

Since you are using "update-policy local;", when you make changes with
"nsupdate -l", does the right thing happen?

AlanC


More information about the bind-users mailing list