<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>I have a zone that I'd like to serve in two different views, with
dnssec in both views. However, this leads to a pair of error
messages:</p>
<blockquote>named[858]: malformed transaction:
dynamic/db.dragonsdawn.net.signed.jnl last serial 2017011485 !=
transaction first serial 2017011477<br>
named[858]: zone dragonsdawn.net/IN/local_resolver (signed):
zone_resigninc:dns_journal_write_transaction -> unexpected
error</blockquote>
<p>Is it possible to serve a second view, using the keys that are
maintained in the primary view? This might be mostly for
curiosity's sake, since the value of signed responses is
reasonably low for "local" clients.</p>
<p><br>
</p>
<p>view local_resolver {<br>
...<br>
zone "dragonsdawn.net" IN {<br>
type master;<br>
file "dynamic/db.dragonsdawn.net";<br>
update-policy local;<br>
key-directory "keys/dragonsdawn.net";<br>
inline-signing yes;<br>
auto-dnssec allow;<br>
};<br>
};<br>
</p>
<p>view public {<br>
recursion no;<br>
...<br>
zone "dragonsdawn.net" IN {<br>
type master;<br>
file "dynamic/db.dragonsdawn.net";<br>
update-policy local;<br>
key-directory "keys/dragonsdawn.net";<br>
inline-signing yes;<br>
auto-dnssec maintain;<br>
};<br>
};<br>
<br>
</p>
</body>
</html>