key dir massive

Eric Germann ekgermann at semperen.com
Thu Dec 22 15:23:26 UTC 2022


> On Dec 22, 2022, at 09:32, Matthijs Mekking <matthijs at isc.org> wrote:
> 
> 
</snip>

> I hope you have read our KB article on dnssec-policy before migrating:
> 
>  https://kb.isc.org/v1/docs/en/dnssec-key-and-signing-policy
> 
> It should list the main pitfalls to save you a lot of hassle (I suspect you started algorithm rollover immediately when changing to dnssec-policy default).
> 
> If there are any things we should add, I am happy to receive your suggestions.

Are there any examples from ISC on how to handle multiple algorithms in the dnssec-policy stanza?  I’m running 8 and 13 both as an experiment

Eric



More information about the bind-users mailing list