is it possible to dynamically update an RRSIG record?

Jack Tavares j.tavares at F5.com
Tue Jan 26 16:56:27 UTC 2010



>Jack Tavares wrote:
>> Looking at the code for libbind, specifically
>> res_nmkupdate,
>> there is no case statement for RRSIG records.
>>
>> In this case, I was trying to update the  TTL.
>> Is that not allowed intentionally?
>
>I think so. The TTL of a RRSIG RR *MUST* match the TTL value of the
>RRset it covers.
>
>Hugo

Hmm. Well then i guess one cannot update the TTL of the RRSIG itself, since if
it must match the RRset it covers, then the TTL on the RRSET must be changed
at which time bind would resign the records.
_______________________________________________
bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


More information about the bind-users mailing list