Re: [Pdns-users] INCEPTION-INCREMENT for a signed zone

2022-08-31 Thread Klaus Darilion via Pdns-users
Hi Tomas! I can not speak about INCEPTION-INCREMENT. But I remember when we had to decide which increment-method to choose we have chosen INCREMENT-WEEKS because it is the only method that works always - regardless of the serial format chosen by the zone editor. With INCREMENT-WEEKS the serial

Re: [Pdns-users] Is there any option to change the custom RRSIG signature validity in DNSSEC?

2022-08-31 Thread Brian Candler via Pdns-users
On 31/08/2022 20:28, Mohammad Ishtiaq Ashiq Khan via Pdns-users wrote: Right now, it is set to 3 weeks and after looking at the code, it seems like this is fixed at PowerDNS. Please correct me if I am wrong. No, you're correct. See: https://doc.powerdns.com/authoritative/dnssec/modes-of-opera

[Pdns-users] Is there any option to change the custom RRSIG signature validity in DNSSEC?

2022-08-31 Thread Mohammad Ishtiaq Ashiq Khan via Pdns-users
Hello, I am currently using PowerDNS as an authoritative server for my domain and while trying to enable DNSSEC, I was able to sign the domain correctly but did not seem to find any option for changing the custom signature validity for the created RRSIGs. Right now, it is set to 3 weeks and after l