In message <[email protected]>, Thomas Schulz writes: > Right now we have our external view for adi.com set up to use > inline-signing with the following entries in our named.conf file; > > inline-signing yes; > key-directory "dnssec"; > auto-dnssec maintain; > > I now need to allow dynamic updates to support letsencrypt which needs > to add txt records when the certificate is renewed. Can I just add > > allow-update { key keyname-here; }; > > Or do I need to change the above configuration in some way?
That or a update-policy clause should be all that is required. > Tom Schulz > Applied Dynamics Intl. > [email protected] > _______________________________________________ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > [email protected] > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: [email protected] _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
