Re: getting two rrsigs for dnskey after ksk rollover

2017-09-21 Thread Tony Finch
> On 20 Sep 2017, at 15:32, rams wrote: > > We are getting two RRSIGs and 3 DNSKEY [ 1-256 and 2-257] when we do KSK > rollover. Is it correct we are returning two RRSIGs for DNSKEY? Yes :-) There are multiple ways to do a KSK rollover: you are doing a double-KSK rollover. The full explanat

getting two rrsigs for dnskey after ksk rollover

2017-09-20 Thread rams
Greetings!!! We are getting two RRSIGs and 3 DNSKEY [ 1-256 and 2-257] when we do KSK rollover. Is it correct we are returning two RRSIGs for DNSKEY? Regards, Ramesh ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from