DNSSEC and upgrading/restoring

[Tony Finch]

David Newman <dnewman at networktest.com> wrote:
> On 1/31/14 10:35 AM, Tony Finch wrote:
> > David Newman <dnewman at networktest.com> wrote:
> >>
> >> What action, if any, is needed?
> >
> > Does rndc sign <zone> make it wake up?
>
> Alas, no. There are a bunch of successful IXFR messages to slave servers
> but the dates in that NSEC3PARAM RRSIG did not change.

Not good. I would try deleting and re-adding the NSEC3PARAM records.
Slow if the zones are big but at least it should fix the problem.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Forties, Cromarty: East, veering southeast, 4 or 5, occasionally 6 at first.
Rough, becoming slight or moderate. Showers, rain at first. Moderate or good,
occasionally poor at first.