mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-26 03:11:56 -05:00
2534a73a59
dnssec-signzone. These can be disabled with -P.
The post sign verification test ensures that for each
algorithm in use there is at least one non revoked
self signed KSK key. That all revoked KSK keys are
self signed. That all records in the zone are signed
by the algorithm. [RT #19653]
10 lines
332 B
Dns
10 lines
332 B
Dns
;
|
|
; This is a zone which has three DNSKEY records, two (KSK + ZSK) of
|
|
; which have existing private key files available. The third is a
|
|
; pre-published ZSK.
|
|
;
|
|
$TTL 3600
|
|
example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
|
|
$include Kexample.com.+005+07065.key
|
|
$include Kexample.com.+005+23362.key
|
|
$include bogus-zsk.key
|