> Does anyone use dnssec-signzone with -x? If so, can you check/tell me > your DNSKEY RRset? And if it works, could you reveal the full > commandline argument used, the bind version, and whether any pkcs#11 > provider was compiled in?
I just tested it with "dnssec-signzone -Sx example.com" and "dnssec-signzone -x example.com", on 9.9.2 and 9.7.4, and it worked as expected in all cases. Were you signing your zone from scratch, or re-signing a zone that was already signed? If there was a pre-existing ZSK signature, the signing process might have left it in place. -- Evan Hunt -- e...@isc.org Internet Systems Consortium, Inc. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
