> All keys were available to BIND, and the zone was successfully > resigned just by running dnssec-signzone over the zone with no > arguments (except for the zone file name).
Hmm, sorry to have posted prematurely - it looks like all keys were *not* available to BIND due to file ownership issues, but were available to me when I ran dnssec-signzone. So please ignore, and apologies... -roy _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users