<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8">
</head>
<body>
<div style="font-family:sans-serif"><div style="white-space:normal">
<p dir="auto">Thank you for your speedy response, Matthijs.</p>
<p dir="auto">On 7 Nov 2022, at 13:10, Matthijs Mekking wrote:</p>
</div>
<div style="white-space:normal"><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><p dir="auto">Ignore that, I saw too late there were attachments.</p>
</blockquote></div>
<div style="white-space:normal">
<p dir="auto">Perhaps I ought to have mentioned them explicitly.</p>
</div>
<div style="white-space:normal"><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><p dir="auto">Are you able to share the public key and key state files with me so I can investigate why BIND thinks the existing keys cannot be used?</p>
</blockquote></div>
<div style="white-space:normal">
<p dir="auto">Off list, and PGP-protected, yes.</p>
<p dir="auto">This will mean I'll end up having to change the parent DS RRs later on.<br>
That seems a reasonable cost for getting to the root of the problem.</p>
<p dir="auto">I have no key state files, except after starting named, and then only<br>
for the RSA/SHA-256 and <strong>newly-generated</strong> ECDSA keys. My current<br>
signing process uses ldns-signzone, which seems not to use such files.</p>
</div>
<div style="white-space:normal"><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><p dir="auto">Also, the log file looks like an excerpt.</p>
</blockquote></div>
<div style="white-space:normal">
<p dir="auto">No; that's everything named, as configured, writes.</p>
</div>
<div style="white-space:normal"><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><p dir="auto">A full debug (level 3) log would be useful too.</p>
</blockquote></div>
<div style="white-space:normal">
<p dir="auto">I'll set up for that, and follow up off list.</p>
<p dir="auto">Thanks and best regards,<br>
Niall</p>
</div>
</div>
</body>
</html>