I didn't increment the serial number on the master. After fix it, sync is
OK.
Thanks all of you!
$TTL 86400 ; 1 day
pateo.com.cnIN SOA dnssrv1.pateo.com.cn. root.pateo.com.cn. (
100224013 ; serial
3600 ; refr
On 5/27/2010 6:36 AM, Alan Clegg wrote:
> On 5/27/2010 1:43 AM, rams wrote:
>
>> How do we resign the signed zone? What is the command to do the RESIGNING ?
>
> Run dnssec-signzone on the signed zone file. I recommend that you:
But, of course my PRIMARY recommendation would be to make the zone
On 5/27/2010 1:43 AM, rams wrote:
> How do we resign the signed zone? What is the command to do the RESIGNING ?
Run dnssec-signzone on the signed zone file. I recommend that you:
mv example.com.signed example.com
vi example.com
dnssec-signzone example.com
rndc reload example.com
Note
On 05/27/2010 06:43 AM, rams wrote:
Hi,
How do we resign the signed zone? What is the command to do the RESIGNING ?
Resign with a new ZSK, or resign with the existing ZSK to a avoid
signature expiry?
Which version of bind are you running? What's the zone statement look like?
___
4 matches
Mail list logo