rams <brames...@gmail.com> wrote: > Currently in bind we are doing auto full sign when RRSIG expires . Is there > any chance to generate only RRSIGS instead of full sign.
If you pass the existing signed zone to dnssec-signzone it will incrementally re-sign it as required - see the last example in the man page. Or use named's built-in incremental signing. Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ - I xn--zr8h punycode Viking, North Utsire: Easterly or northeasterly 4 or 5, occasionally 6 in south Viking. Slight or moderate, occasionally rough in south Viking. Fair. Good. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
