[Pdns-users] Setting up intentionally invalid DNSSEC record in auto-secure environment

[Pieter Lexis]

Hi Nick,

On Wed, 6 Jan 2016 13:26:59 -0600
Nicholas Williams <nicholas at nicholaswilliams.net> wrote:

> Yea, but that's the rub. I want to do this WITHOUT 'presigned zones.'
> I want everything else to be live-signed (because it's SO much easier
> than presigning), and only munge this one subdomain's RRSIGs.

You can set presigned for just that single zone using the PRESIGNED
domain metadata[1] int your database.

1 - https://doc.powerdns.com/md/authoritative/domainmetadata/#presigned

-- 
Pieter Lexis
PowerDNS.COM BV -- https://www.powerdns.com