[Opendnssec-develop] No RRSIG in .signed.sorted
Rickard Bellgrim
rickard.bellgrim at iis.se
Thu Mar 25 16:33:10 UTC 2010
> Hmm, but this is the same behavior as in v1.0. That there is no RRSIG in .signed.sorted
Does this imply that we will drop all signatures each month when we roll the ZSK? And each year when we roll the KSK? And when the old ZSK is not postpublished? ... Essentially every time when the DNSKEY RRset changes?
http://trac.opendnssec.org/browser/trunk/OpenDNSSEC/signer/signer_engine/ZoneConfig.py#L94
// Rickard
More information about the Opendnssec-develop
mailing list