Hello guys,

Recently, some zones were not secured anymore because of the Validity Period. The reason was that the signature expiration field of the RRSIG RR was too old.

For this time, I solved this problem by updating my zone. But I don't want to update all of my zones to avoid this.

Is there any rule to calculate the Default and Denial durations for non changing zones?

Thanks!

Gilles
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

Reply via email to