[dns-operations] Don't use dnssec-signzone -g option...
Mark Andrews
Mark_Andrews at isc.org
Tue Sep 16 00:53:52 UTC 2008
It is not a bug. It is documented behaviour. It allows
the presence or absence of a keyset to indicate whether a
delegation is secure or not.
From the man page.
-g
Generate DS records for child zones from keyset files. Existing DS
records will be removed.
Mark
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews at isc.org
More information about the dns-operations
mailing list