<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><tt>Hello,</tt></p>
<p><tt>thank you all for the information, and yes, i will need to read the documentation again. I have a clearer idea now of how the dnssec database is working.<br>
</tt></p>
<p><tt>greetings,</tt></p>
<p><tt>Philip</tt></p>
<div class="moz-cite-prefix">Op 12/07/19 om 08:25 schreef frank+pdns--- via Pdns-users:<br>
</div>
<blockquote type="cite" cite="mid:39AB4A89-DFEE-45CA-BCC2-84491FA6DDB1@louwers.be">
<br class="">
<div><br class="">
<blockquote type="cite" class="">
<div class="">On 11 Jul 2019, at 16:57, Philip Vanmontfort <<a href="mailto:philip@smartbit.be" class="" moz-do-not-send="true">philip@smartbit.be</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div text="#000000" bgcolor="#FFFFFF" class="">
<p class=""><tt class="">goodday,</tt></p>
<p class=""><tt class="">we change the zone's regularly, but the zone's are generated with puppet.<br class="">
</tt></p>
<p class=""><tt class="">If we use a predefined key on all servers wouldn't we get into trouble with key rollovers? for example rollover differences between name servers that are reinstalled? Or is the only important factor the DS key (wich would be the same
on all servers)?</tt></p>
<div class=""><br class="">
</div>
</div>
</div>
</blockquote>
<br class="">
</div>
<div>Philip,</div>
<div><br class="">
</div>
<div><br class="">
</div>
There’s a difference between key rollovers, which don’t happen automatically and you should first figure out why you want to rollover, and signature refreshes, which happen automatically in PowerDNS if you use online signing (the default mode).
<div class=""><br class="">
</div>
<div class="">Also note that the DS records don’t contain the key, they contain a hash of the key.</div>
<div class=""><br class="">
</div>
<div class="">Frank</div>
<div class="">
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode:
space; line-break: after-white-space;" class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: "Avenir Next"; font-size: 13px;
font-style: normal; font-variant-caps: normal; font-weight:
normal; letter-spacing: normal; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
text-decoration: none;">
Frank Louwers<br class="">
PowerDNS Certified Consultant @ <a href="http://Kiwazo.be" class="" moz-do-not-send="true">
Kiwazo.be</a><br class="">
<br class="">
</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: "Avenir Next"; font-size: 13px;
font-style: normal; font-variant-caps: normal; font-weight:
normal; letter-spacing: normal; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
text-decoration: none;" class="">
<br class="">
</div>
<br class="Apple-interchange-newline">
</div>
<br class="Apple-interchange-newline">
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Pdns-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Pdns-users@mailman.powerdns.com">Pdns-users@mailman.powerdns.com</a>
<a class="moz-txt-link-freetext" href="https://mailman.powerdns.com/mailman/listinfo/pdns-users">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a>
</pre>
</blockquote>
</body>
</html>