Re: inline-signing breaks nsdiff.

2023-10-02 Thread Björn Persson
Petr Špaček wrote: > Please open an issue in our Gitlab: Done: https://gitlab.isc.org/isc-projects/bind9/-/issues/4352 Björn Persson pgp3GzBYDpAWV.pgp Description: OpenPGP digital signatur -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the

Re: inline-signing breaks nsdiff.

2023-10-02 Thread Petr Špaček
On 01. 10. 23 21:10, Björn Persson wrote: I find that when both inline-signing and update-policy are in use, I can't detect race conditions with the method described in RFC 2136 section 5.7, which nsdiff uses. It seems that a serial number specified in a prerequisite of an update is compared to

inline-signing breaks nsdiff.

2023-10-01 Thread Björn Persson
I find that when both inline-signing and update-policy are in use, I can't detect race conditions with the method described in RFC 2136 section 5.7, which nsdiff uses. It seems that a serial number specified in a prerequisite of an update is compared to the unsigned version of the zone, but the se