Re: [Pdns-users] Is there any option to change the custom RRSIG signature validity in DNSSEC?

[Brian Candler via Pdns-users]

On 31/08/2022 20:28, Mohammad Ishtiaq Ashiq Khan via Pdns-users wrote:
Right now, it is set to 3 weeks and after looking at the code, it 
seems like this is fixed at PowerDNS. Please correct me if I am wrong. 


No, you're correct. See:

https://doc.powerdns.com/authoritative/dnssec/modes-of-operation.html#signatures

___
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users

[Pdns-users] Is there any option to change the custom RRSIG signature validity in DNSSEC?

[Mohammad Ishtiaq Ashiq Khan via Pdns-users]

Hello,
I am currently using PowerDNS as an authoritative server for my domain and
while trying to enable DNSSEC, I was able to sign the domain correctly but
did not seem to find any option for changing the custom signature validity
for the created RRSIGs. Right now, it is set to 3 weeks and after looking
at the code, it seems like this is fixed at PowerDNS. Please correct me if
I am wrong.

Could anyone tell me if there is any way to change the validity period of
the signature like BIND provides?

Thanks and best regards,
-- 
Mohammad Ishtiaq Ashiq Khan,
Ph.D. Student,
Department of Computer Science,
Virginia Tech
___
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users