<html><head></head><body><div class="ydpf4ae6575yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div></div>
<div>Thanks Even. Sounds like "dnssec-validation auto" is a more future-proof option for what want it. I will use that instead.</div><div><br></div><div><br></div><div><br></div>
</div><div id="yahoo_quoted_0839374437" class="yahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Wednesday, June 12, 2019, 5:25:51 PM PDT, Evan Hunt <each@isc.org> wrote:
</div>
<div><br></div>
<div><br></div>
<div>On Wed, Jun 12, 2019 at 11:40:27PM +0000, Shawn Zhou via bind-users wrote:<div class="yqt3130395771" id="yqtfd49921"><br clear="none">> The default BIND9 installation for CentOS7 has dnssec-validation set to<br clear="none">> "yes" and it also includes managed-keys as well. Do those managed-keys<br clear="none">> get updated automatically?</div><br clear="none"><br clear="none">Yes, if the "managed-keys" statement is in named.conf (or included in<br clear="none">it via an "include" statement) then the keys will be updated automatically.<br clear="none">Based on what you copy-pasted, that appears to be the case.<br clear="none"><br clear="none">"dnssec-validation auto" causes named to use its built-in key for the root<br clear="none">zone, so you don't have to put your own "managed-keys" statement into<br clear="none">named.conf, but otherwise it's the same as "dnssec-validation yes".<br clear="none"><br clear="none">(BTW, a note in passing: we're changing the command from "managed-keys" to<br clear="none">"dnssec-keys" over the next few years. The new syntax will be available in<br clear="none">BIND 9.15.1, which should be out next week; the old syntax will be<br clear="none">phased out later.)<br clear="none"><br clear="none">-- <br clear="none">Evan Hunt -- <a shape="rect" ymailto="mailto:each@isc.org" href="mailto:each@isc.org">each@isc.org</a><br clear="none">Internet Systems Consortium, Inc.<div class="yqt3130395771" id="yqtfd31754"><br clear="none"></div></div>
</div>
</div></body></html>