auto RRSIG enable

[Nyamkhand Buluukhuu]

Hello,

Yes you can define below configurations in your options:


       inline-signing yes;​

This configuration automates your signing zone tasks as whenever you change, add, delete your records or signature expired, named automatically re-sign your zone data with the keys in your key-directory.​

        ​

       auto-dnssec maintain;​

This is for the automated key management. With this option enabled, named will periodically check if there are new key available, or expired key and manage DNSKEY records. It's very helpful when you renew your keys.


Have a nice day :)
BR, NYAMKHAND Buluukhuu

Engineer
TPD/ETSD

UNESCO street - 28, MPM Complex

Ulaanbaatar -14220, Mongolia

Mobile:   (976) 94081017
Web:       www.mobicom.mn<http://www.newcom.mn/>

Before you start - Be safety smart

[cid:a4d66a69-69bf-434d-842c-f5bc1739cc6c]


________________________________
From: bind-users <bind-users-bounces at lists.isc.org> on behalf of rams <bramesh80 at gmail.com>
Sent: Monday, November 2, 2020 2:14 PM
To: bind-users <bind-users at isc.org>
Subject: auto RRSIG enable

Hi,
Do we need to set any option in named.conf for auto RRSIG generation in bind?
Can anyone help me on this.

Regards,
Ramesh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20201102/59389530/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-seznrd2m.png
Type: image/png
Size: 39408 bytes
Desc: Outlook-seznrd2m.png
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20201102/59389530/attachment-0001.png>