Re: bind 9.7.1 tries to automatically resign non-dynamic zones

2010-09-03 Thread Paul B. Henson
Didn't see any replies on this :(. I did send it on a Sunday and maybe it slipped through the cracks, so I thought I'd try one more time and hope somebody might have an idea what's going on :). I opened a bug with ISC, but no response on that yet. I dug through the source code some myself, the

bind 9.7.1 tries to automatically resign non-dynamic zones

2010-08-29 Thread Paul B. Henson
We're prototyping dnssec with bind 9.7.1, and ran into a strange issue where it looks like bind is trying to automatically resign non-dynamic zones when the signatures are going to expire. Our zones are signed by an external process, and all bind is supposed to do is serve them 8-/. Zones are