[Opendnssec-develop] Serial from working directory

Matthijs Mekking matthijs at NLnetLabs.nl
Wed Nov 25 13:47:07 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ok, then I propose to not remove the .serial file on clear and if people
really want to reset their zone to rm -f stuff. Perhaps later we can
find a better way to clear non-DNSSEC internal storage.

Matthijs

sion at nominet.org.uk wrote:
>> I'm not too fond about adding a new command that does clear and clear
>> the serial. Why shouldn't 'clear' clear the serial file?
>>
>> Isn't clear already meant to be 'start from scratch'?
> 
> I've interpreted it as "throw away cached DNSSEC data", e.g. regenerate all
> signatures and NSEC information. We might routinely do this for .uk for
> instance, as we don't care about optimisation for such a small zone. I
> don't see rememering the SOA serial as an optimisation.
> 
> This is just my interpretation of a command that I have not used very much
> though.
> 
> Sion
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBAgAGBQJLDTVZAAoJEA8yVCPsQCW5VGQIANmAubXMPgSn+cNITZwZdIdB
CBzEBaBYRe/6bjt9srCFgHUi47vu5Ioq2qyWwuct/8l5wWbo62N+jaF6lyjFbABy
x6iiVIvpH/qiXppstdoAa1yreRwLubbY2w2mhcUI5sPOdE7skjGFlgSFGz0BW+Th
OEW/3PKl7xvcdiPIkhM/4alS59CNfgtrWn6A3W8FDxBa1ZBUCee4zvgcaSk25K+g
v9nFZmRpn17mezaHJfBbqvUuxmsBN1Pb9RBw+c9jV8mQtjogdUlvzbtXdKQHcz9T
LwDnlc8QxVFwSP8id19ZjWO84V0BcwRpEO4X6FYPTRDWNRmY/nQcws6/ISvkyIo=
=boxa
-----END PGP SIGNATURE-----



More information about the Opendnssec-develop mailing list