Re: choosing key for auto-signing

2009-05-20 Thread Richard Doty
On Wed, 20 May 2009 14:56:20 +1000 Mark Andrews wrote: > > In message <200905200158.n4k1wmzv006...@edge.twig.com>, Richard Doty writes: > > I am running bind 9.5.0, and have a dynamic zone with two ZSK set > > up in the pre-publish manner - one ZSK is "published" but not used > > for signing, one

Re: choosing key for auto-signing

2009-05-19 Thread Mark Andrews
In message <200905200158.n4k1wmzv006...@edge.twig.com>, Richard Doty writes: > I am running bind 9.5.0, and have a dynamic zone with two ZSK set > up in the pre-publish manner - one ZSK is "published" but not used > for signing, one ZSK is "active" and signs all records. That's > how I use them w

choosing key for auto-signing

2009-05-19 Thread Richard Doty
I am running bind 9.5.0, and have a dynamic zone with two ZSK set up in the pre-publish manner - one ZSK is "published" but not used for signing, one ZSK is "active" and signs all records. That's how I use them when I do a full re-sign with dnssec-signzone. But when I make a dynamic update to the