> On Dec 15, 2022, at 11:31 PM, Mark Andrews <ma...@isc.org> wrote: > > Stop freezing the zone. Use nsupdate to update the zone. Add a record back > in at the name using nsupdate. Then remove using nsupdate. If you really > want to edit the zone by hand use ‘inline-signing yes;’. >
Yes, this is exactly what I did a short time after posting to the list :/ nsupdate worked exactly as expected. I was “doing surgery” on the signed file. Obviously ended in disappointment. For some reason I had it stuck in my head that inline-signing was mutually exclusive with dnssec-policy. That was my missing piece. Thanks. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
