hi,
If there are currently no keys that we have to check the DS for, then you may still see this log line.
all my zones have now toggled rumoured -> omnipresent. i took no explicit manual action other than letting an arbitrarily long-ish time pass. it just happened ... eventually. re: your comment "we have to check the DS for", what exec _forces_ a (re)check of keys' DS ? i'd understood rndc dnssec -checkds published ${zone} to do exactly that. i.e., check 'NOW'. and, since the DS were clearly published and available @ my each/all of my parental-agents{}, that the state toggle would happen, similarly, 'NOW'. or at least NOW-ish. is that incorrect? -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users