Aleks Ostapenko <aleks.ostapenko.p...@gmail.com> wrote: > > Unfortunately, after > > 1. rndc freeze myzone > 2. named-comilezone -f raw -F text -o myzone.text myzone myzone.signed > change TTL on DNSKEY and RRSIG DNSKEY in myzone.text > named-comilezone -f text -F raw -o myzone.signed myzone myzone.text > 3. rndc thaw myzone > > TTL in DNSKEY and RRSIG DNSKEY records still have old values in signed zone > (checked via `dig` locally).
Hmm :-( Does it work better if you increment the SOA serial number as well? Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ - I xn--zr8h punycode Tyne, Dogger, Fisher, German Bight, Humber: Southwest, veering west, 4 or 5. Slight or moderate. Showers for a time. Good. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
