Re: Comments on Root Key Rollover impact on BIND users

2016-12-12 Thread Tony Finch
Thomas Schulz wrote: > > I found that I had 'dnssec-enable yes' along with a managed-keys > statement with an initial-key. If I change to 'dnssec-enable auto' > do I still need a managed-keys statement? If not will it hurt to have > one? Can I have a managed-keys statement without an initial-key?

Re: Comments on Root Key Rollover impact on BIND users

2016-12-12 Thread Thomas Schulz
In the following I ment to say 'dnssec-validation' instead of 'dnssec-enable'. > > https://www.isc.org/blogs/2017-root-key-rollover-what-does-it-mean-for-bin > > d-users/ > > > > Towards the end of the blog, there is a short list of possible corner > > cases that could trip people up during the

Re: Comments on Root Key Rollover impact on BIND users

2016-12-12 Thread Thomas Schulz
> https://www.isc.org/blogs/2017-root-key-rollover-what-does-it-mean-for-bin > d-users/ > > Towards the end of the blog, there is a short list of possible corner > cases that could trip people up during the rollover. If > you folks can think of others, please do share them. I found a case where