<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1450572540078_16389">This is a repost from 12-19-2015 which appears stuck in the queue:</div><div id="yui_3_16_0_1_1450572540078_16736"><br></div><div dir="ltr" id="yui_3_16_0_1_1450572540078_16735">I have using the exact same rndc method to load inline signing keys as what worked yesterday, but today the same steps are failing?<br class="" id="yui_3_16_0_1_1450572540078_16771">a stuck key?<br class="" id="yui_3_16_0_1_1450572540078_16773"><br class="" id="yui_3_16_0_1_1450572540078_16775"> # rndc flush<br class="" id="yui_3_16_0_1_1450572540078_16777"> # rndc reconfig<br class="" id="yui_3_16_0_1_1450572540078_16779"> # rndc addzone domain.com in external '{type master; auto-dnssec maintain; inline-signing yes; key-directory "/home/mailer-domains/domain.com/"; file "/home/mailer-domains/domain.com/domain.com.external"; update-policy { grant ddns-key zonesub ANY; };};'<br class="" id="yui_3_16_0_1_1450572540078_16781"> # rndc loadkeys domain.com<br class="" id="yui_3_16_0_1_1450572540078_16783"> # rndc signing -nsec3param 1 0 10 03F92714 domain.com.<br class="" id="yui_3_16_0_1_1450572540078_16785"><br class="" id="yui_3_16_0_1_1450572540078_16787"> <br class="" id="yui_3_16_0_1_1450572540078_16789"> [\u@yoda:/usr/local/etc/namedb] # rndc zonestatus domain.com<br class="" id="yui_3_16_0_1_1450572540078_16791"> name: domain.com<br class="" id="yui_3_16_0_1_1450572540078_16793"> type: master<br class="" id="yui_3_16_0_1_1450572540078_16795"> files: /home/mailer-domains/domain.com/domain.com.external<br class="" id="yui_3_16_0_1_1450572540078_16797"> serial: 2015121923<br class="" id="yui_3_16_0_1_1450572540078_16799"> signed serial: 2015121931<br class="" id="yui_3_16_0_1_1450572540078_16801"> nodes: 9<br class="" id="yui_3_16_0_1_1450572540078_16803"> last loaded: Sun, 20 Dec 2015 00:07:01 GMT<br class="" id="yui_3_16_0_1_1450572540078_16805"> secure: no<br class="" id="yui_3_16_0_1_1450572540078_16807"> key maintenance: automatic<br class="" id="yui_3_16_0_1_1450572540078_16809"> next key event: Sun, 20 Dec 2015 01:18:20 GMT<br class="" id="yui_3_16_0_1_1450572540078_16811"> dynamic: yes<br class="" id="yui_3_16_0_1_1450572540078_16813"> frozen: no<br class="" id="yui_3_16_0_1_1450572540078_16815"> <br class="" id="yui_3_16_0_1_1450572540078_16817"> <br class="" id="yui_3_16_0_1_1450572540078_16819"> error:<br class="" id="yui_3_16_0_1_1450572540078_16821"> 20-Dec-2015 01:30:56.735 general: info: received control channel command 'signing -nsec3param 1 0 10 03F92714 domain.com.'<br class="" id="yui_3_16_0_1_1450572540078_16823"> 20-Dec-2015 01:30:56.735 general: debug 1: setnsec3param: zone domain.com/IN/external (signed): enter<br class="" id="yui_3_16_0_1_1450572540078_16825"> 20-Dec-2015 01:30:56.735 general: error: zone domain.com/IN/external (signed): could not get zone keys for secure dynamic update<br class="" id="yui_3_16_0_1_1450572540078_16827"><br class="" id="yui_3_16_0_1_1450572540078_16829"><br class="" id="yui_3_16_0_1_1450572540078_16831">the keys are present, valid and correct permissions. no other errors<br class="" id="yui_3_16_0_1_1450572540078_16833"><br class="" id="yui_3_16_0_1_1450572540078_16835"><br class="" id="yui_3_16_0_1_1450572540078_16837">key generation method:<br class="" id="yui_3_16_0_1_1450572540078_16839"><br class="" id="yui_3_16_0_1_1450572540078_16841"> subprocess.check_output([ 'dnssec-keygen', '-a', 'RSASHA256', '-b', '2048', '-3', domain.com ]) <br class="" id="yui_3_16_0_1_1450572540078_16845"> subprocess.check_output([ 'dnssec-keygen', '-a', 'RSASHA256', '-b', '2048', '-3', '-fk', domain.com ])</div><div dir="ltr"><br></div><div id="yui_3_16_0_1_1450572540078_17016" dir="ltr">freebsd-version<br class="" id="yui_3_16_0_1_1450572540078_17018">10.1-RELEASE-p5<br class="" id="yui_3_16_0_1_1450572540078_17020"><br class="" id="yui_3_16_0_1_1450572540078_17022">named -v<br class="" id="yui_3_16_0_1_1450572540078_17024">BIND 9.10.3 <id:2799933><br class="" id="yui_3_16_0_1_1450572540078_17026"><br></div></div></body></html>