[Pdns-users] RRSIG Registers Missing on Primary Server
Jan-Piet Mens
list at mens.de
Mon Nov 22 17:43:31 UTC 2021
>My question is: Why RRSIG registers are missing on my primary server?
They aren't missing. :-)
If you look carefully at the zone as it was transferred to your
secondaries, you will see the RRSIGs, so they must have come from
somewhere, right, particularly as the zone is indicated as being
PRESIGNED.
Indeed, PowerDNS produces RRSIGs on the fly, i.e. they aren't stored in
the database on the primary. When a query is to be answered, RRSIGs are
generated and sent out with the response. The same occurs when a zone
transfer is requested.
-JP
More information about the Pdns-users
mailing list