"auto-dnssec maintain;" and key "missing or inactive and has no replacement"
Stephane Bortzmeyer
bortzmeyer at nic.fr
Fri Jul 26 13:37:46 UTC 2013
On Fri, Jul 26, 2013 at 08:52:04AM +0200,
Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote
a message of 24 lines which said:
> Yes. I tested with two keys, a KSK and a ZSK and the warning
> disappears.
Another solution, even if using only one key, is to add:
update-policy local; # Necessary, says the ARM (otherwise, you cannot freeze/thaw)
in the zone configuration. Apparently, it worked without it but, when
you use it, there is no longer this undecipherable warning.
More information about the bind-users
mailing list