|
|
|
Note:
|
|
|
|
Your zone file
should have a default TTL at the top.
|
|
$TTL 1D
|
|
|
|
All records in
your zone file that do not have their TTL explicitly set will get the default
TTL when loaded by the name server from the zone file.
|
|
|
|
If you store
your zones in files that do not have the same name as the zone itself you
will need to use the Ô-o <origin>Õ flag when signing. For instance if
the ripe.net zonefile is named ripe.db the command would look like this:
|
|
|
|
dnssec-signzone -o ripe.net ripe.db
Kripe.net.+001.+20704
|
|
|
|
If you forget to
increase the serial number before signing; your slave will not pick up your
resigned zone and zones may get ÔbadÕ because of signature expiration of the
data published by slaves.
|
|
Alternatively
one can use $include
Ksecret-wg.org.+001+20704.key
to include the key into the zone file.
|