[Opendnssec-user] DNSKEY RRset signing with ZSK

[Paul Wouters]

Hi,

I'm looking at telling opendnssec to sign the DNSKEY RRset with both the
ZSK and KSK.

The documentation at https://wiki.opendnssec.org/display/DOCS/signconf.xml
tells me to add "<ZSK/>" to the Keys section for the 257 flags. This did
not seem to work for me.

However, this file is generated based on other xml files. Is there a way
to specify this via a policy option in kasp.xml?

Paul