Does anybody know why the DNSKEY RRsigs are not re-signed with dynamic update??
Are you using BIND 9.7? If you want BIND 9.7 to automatically re-sign a zone after a dynamic update you need to add "auto-dnssec maintain" to the zone file definition.
Sign up using Google
Sign up using Facebook
Sign up using Stack Exchange
3 years ago