9.7.0rc1 auto-dnssec control of RRSIG generation
johani at autonomica.se
Mon Jan 4 00:53:57 UTC 2010
>> is there any way to control the validity period of RRSIGs generated by
>> 9.7.0rc1 with auto-dnssec maintain?
> sig-validity-interval <days>;
...speaking of auto-dnssec:
why is auto-dnssec only available for zones that are automatically updated? I can understand that the arrival of a dynamic update is a natural trigger for re-signing. But re-signing is also needed for static zones and to me it seems that a timer that wakes up the re-signing urge on a suitable clock would be an obvious thing.
But I'm perhaps missing something?
More information about the bind-workers