Hi Daniel,

> On 28 Nov 2025, at 15:09, Daniel Salzman via knot-dns-users 
> <[email protected]> wrote:
> 
> Are you able to reproduce the issue with a different key set?
> 

Yes, but always the same kind, RSASHA256 outgoing, ECDSAP256SHA256 incoming.
Starts happening after I run knotc zone-ksk-submitted. 

> How do you synchronize data in softhsm? Do you simply replace the whole 
> directory?
> 

The script cleans the destination directory, rsyncs the results of knotc 
zone-backup and
runs knotc zone-restore on the destination host.

.einar
--

Reply via email to