Hi all, I made a mistake in the subject, it should say "ZSK rollover".
I have one addition to the problem: one recursive resolver started reporting these problems:
Dec 6 18:58:14 Drizzt named[5884]: validating voja.de/SOA: no valid signature found Dec 6 18:58:14 Drizzt named[5884]: validating webmail.voja.de/NSEC: no valid signature found Dec 6 18:58:14 Drizzt named[5884]: validating voja.de/SOA: no valid signature found Dec 6 18:58:14 Drizzt named[5884]: validating webmail.voja.de/NSEC: no valid signature found Dec 6 18:58:14 Drizzt named[5884]: no valid RRSIG resolving 'webmail.voja.de/DS/IN': 85.236.47.38#53
All servers use the same timezone. Regards Volker -- https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
