[Pdns-users] DNSSEC and SOA expire field

Martin Chandler mchandler at aventer.net
Tue Jul 9 23:42:31 UTC 2013


Hi,

When using PowerDNS for DNSSEC, is there any way to configure the
validity period of the RRSIG records to be greater than the default 2 weeks?
If not, what is the recommended value for the SOA expire field for
DNSSEC enabled zones (I understand it is best to set it to something
less than the RRSIG validity period to avoid signatures expiring before
a zone expires if a slave has connectivity problems with its master)

Thanks,
Martin
-- 
 Cellular phone : 080-4359-8579
 e-mail:mchandler at aventer.net
 URL   :http://www.aventer.net/




More information about the Pdns-users mailing list