Bert noticed a difference in the RRSET my server generated. It turned out that my use of right/ instead of posix/ TZs confused the sig generation.
After I exported TZ=posix/UTC in the pdns startup script it started generating usable sigs. The axfr slaves are still not completely happy with the zones, but dig and unbound were able to verify them. -JimC -- James Cloos <[email protected]> OpenPGP: 1024D/ED7DAEA6 _______________________________________________ Pdns-dev mailing list [email protected] http://mailman.powerdns.com/mailman/listinfo/pdns-dev
