[Pdns-users] RRSIG Registers Missing on Primary Server

Jan-Piet Mens list at mens.de
Mon Nov 22 17:43:31 UTC 2021


>My question is: Why RRSIG registers are missing on my primary server?

They aren't missing. :-)

If you look carefully at the zone as it was transferred to your 
secondaries, you will see the RRSIGs, so they must have come from 
somewhere, right, particularly as the zone is indicated as being 
PRESIGNED.

Indeed, PowerDNS produces RRSIGs on the fly, i.e. they aren't stored in 
the database on the primary. When a query is to be answered, RRSIGs are 
generated and sent out with the response. The same occurs when a zone 
transfer is requested.

	-JP


More information about the Pdns-users mailing list