[Opendnssec-develop] No RRSIG in .signed.sorted

Rickard Bellgrim rickard.bellgrim at iis.se
Thu Mar 25 16:33:10 UTC 2010


> Hmm, but this is the same behavior as in v1.0. That there is no RRSIG in .signed.sorted

Does this imply that we will drop all signatures each month when we roll the ZSK? And each year when we roll the KSK? And when the old ZSK is not postpublished? ... Essentially every time when the DNSKEY RRset changes?

http://trac.opendnssec.org/browser/trunk/OpenDNSSEC/signer/signer_engine/ZoneConfig.py#L94

// Rickard


More information about the Opendnssec-develop mailing list