Re: KASP: sharing policy and keys between views

2023-03-17 Thread Nick Tait via bind-users
I've only done a key rollover a couple of time in that period.But this setup has been working fine for me the whole time.Nick. Original message From: Matthijs Mekking Date: 18/03/23 3:43 AM (GMT+12:00) To: bind-users@lists.isc.org Subject: Re: KASP: sharing policy and keys

Re: KASP: sharing policy and keys between views

2023-03-17 Thread Matthijs Mekking
Hi Carsten, We did have some bugs in the past when it comes to sharing keys with dnssec-policy among different views. But the last one is from a year ago (fixed in 9.16.19). So while I don't have experience myself with a similar setup, we did have some bug reports that used dnssec-policy

KASP: sharing policy and keys between views

2023-03-17 Thread Carsten Strotmann via bind-users
Hi, (please do not start a discussion on the usefulness of views. I'm not in favor of views, but sometimes I have to work with them). I have a client that runs a split horizon (internal / external view of the same domain namespace) setup with BIND 9 on Linux. Both the internal and external