9.7.0rc1 auto-dnssec control of RRSIG generation

Johan Ihren johani at autonomica.se
Mon Jan 4 00:53:57 UTC 2010


Hi,

>> is there any way to control the validity period of RRSIGs generated by  
>> 9.7.0rc1 with auto-dnssec maintain?
> 
> sig-validity-interval <days>;

...speaking of auto-dnssec:

why is auto-dnssec only available for zones that are automatically updated? I can understand that the arrival of a dynamic update is a natural trigger for re-signing. But re-signing is also needed for static zones and to me it seems that a timer that wakes up the re-signing urge on a suitable clock would be an obvious thing.

But I'm perhaps missing something?

Regards,

Johan






More information about the bind-workers mailing list