[dns-operations] Requesting insight about a RRSIG expiration/renewal issue

[Sadiq Saif]

On Mon, Jul 3, 2017, at 17:12, Viktor Dukhovni wrote:
 > For me, BIND's unattended re-signing works well enough, with
> monitoring catching the very rare glitches.  It would be even better
> if the underlying issue were identified and resolved.
> 
> -- 
> 	Viktor.

I will concur on that. I've been using the BIND automatic DNSSEC
maintenance for years at this point and this is the first time I've
noticed an issue.

That said, my monitoring here is non-existent, I only found out about it
indirectly because a monitoring service couldn't resolve the
hostname(s). 

Viktor, if you can provide your DNSSEC monitoring script(s), I (and
others) would appreciate it. 

-- 
Sadiq Saif
https://sadiqsaif.com