Re: Bind keeps adding RRSIGs to zone file after switching to dnssec policy

2022-03-05 Thread Mark Andrews
You switched your server from ‘auto-dnssec maintain;’ to ‘dnssec-policy mypolicy;’ and removed ‘inline-signing yes;’. Put back ‘inline-signing yes;’ if you want named to maintain two instances of the zone. -- Mark Andrews > On 6 Mar 2022, at 03:49, Josef Vybíhal wrote: > > Hi everyone, >

Bind keeps adding RRSIGs to zone file after switching to dnssec policy

2022-03-05 Thread Josef Vybíhal
Hi everyone, today I switched more domains from inline-signing do dnssec-policy and I noticed something that I quite do not like. So I want to ask if that's normal and if there is a way to stop it from happening. I had this: zone "EXAMPLE.com" { type master; file "master/EXAMPLE.com.zone";