Re: DNSSEC algo rollover fails to delete old keys

2024-10-15 Thread Mark Andrews
Restore the keys from backups and let named MANAGE the removal of the old keys. People really need to stop being impatient with DNSSEC key management. It is a SLOW process as there are interactions with the parent zone that need to be co-ordinated and WAIT TIMES that need to be observed. Named h

DNSSEC algo rollover fails to delete old keys

2024-10-15 Thread Arnold DECHAMPS
Hello everyone, I made a algo rollover in DNSSEC from algo 8 to algo 13. Software version : 9.18.28-1~deb12u2-Debian My zone configuration refers to policies : == dnssec-policy "algo8" { keys { ksk lifetime un