Hi all, I have several ZSKs in one zone, but only one is being used for signing. The others seem to be relicts from earlier rollovers. I would like to delete the unused DNSKEY RRs via nsupdate, but how can I identify a DNSKEY by label ?
The zone has not yet been converted to dnssec-policy but uses still auto-dnssec maintain. Axel --- PGP-Key: CDE74120 ☀ mobile: +49 160 7568212 computing @ chaos claudius -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users