<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div style="font-family: Verdana;font-size: 12.0px;">
<div>Hi,</div>
<div> </div>
<div>I'm running the following bind version: BIND 9.9.5-9+deb8u3-Debian</div>
<div>I've tried to setup auto-signing dnssec, by adding the following to my zone-statement:</div>
<div> auto-dnssec maintain;<br/>
inline-signing yes;</div>
<div> </div>
<div>The auto-signing seems to work, but only once. I tried doing a ZSK rollover, and from the moment, the new key was supposed to apeear in the zone, I get the following error messages in my log, every five minutes:</div>
<div> </div>
<div>named[14543]: zone myzone.de/IN/world (signed): reconfiguring zone keys<br/>
named[14543]: malformed transaction: /var/bind/myzone.de.zone.signed.jnl last serial 2015100307 != transaction first serial 2015100306<br/>
named[14543]: zone myzone.de/IN/world (signed): zone_rekey:dns_journal_write_transaction -> unexpected error</div>
<div> </div>
<div>I don't completely understand the problem, but it appears as if bind tries to increase the serial of the zone and then fails somehow.</div>
<div> </div>
<div>Did I forget to configure something? Hos can I avoid this problem?</div>
<div> </div>
<div>Thanks</div>
<div>M.</div>
</div></div></body></html>