Hi Team Of course I was also hit in the face be the inline-signing change when using dnssec policies.
https://kb.isc.org/docs/bind-920-changes#runtime-configuration resulting in broken validation chains etc. I would like to start over with the affected signed zones. I made sure to commit all changes back to the file with rndc sync -clean And now I would like to start over by removing all signatures from the zone file and properly use inline-signing=yes with unsigned base files. dnssec-signzone can remove -Q inactive key or -R unpublished keys But I found no option to remove all signatures. How do I get to a pristine zone file without dnssec from a file with signatures? Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________ -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.
