Re: auto-dnssec sanity check (please)

2015-10-01 Thread Mark Andrews
In message , Jim Popovitch writes: > Hello, > > I recently rollled out auto-dnssec and inline-signing (v9.9.5), and > today (1-Oct 00:00 UTC) was the first automatic zsk rollover. > According to http://dnsviz.net/d/domainmail.org/dnssec/ it appears > that the SOA is signed by the new zsk, but t

auto-dnssec sanity check (please)

2015-10-01 Thread Jim Popovitch
Hello, I recently rollled out auto-dnssec and inline-signing (v9.9.5), and today (1-Oct 00:00 UTC) was the first automatic zsk rollover. According to http://dnsviz.net/d/domainmail.org/dnssec/ it appears that the SOA is signed by the new zsk, but the rest of the RRs are still signed by the old. T