[Pdns-users] DNSSEC slave: TSIG/RRSIG interaction?

[Christof Meerwald]

Hi,

just tried adding some TSIG stuff for AXFRs to my PowerDNS
configuration and now my slave PowerDNS keeps saying (every hour):

Domain cmeerw.priv.at is fresh, but RRSIGS differ, so DNSSEC stale

It looks like when using TSIG PowerDNS doesn't return any RRSIG
records for a SOA request. This then results in the RRSIG mismatch
message.


Christof

-- 

http://cmeerw.org                              sip:cmeerw at cmeerw.org
mailto:cmeerw at cmeerw.org                   xmpp:cmeerw at cmeerw.org