How to remove all signatures from zonefile (inline signing trouble after upgrading to 9.20)
Benoit Panizzon <[email protected]> Fri, 12 Dec 2025 16:56:05 +0100
| Newsgroups | gmane.network.dns.bind.user |
|---|---|
| Organization | ImproWare AG |
| Message-ID | <[email protected]> |
Hi Team Of course I was also hit in the face be the inline-signing change when using dnssec policies. https://kb.isc.org/docs/bind-920-changes#runtime-configuration resulting in broken validation chains etc. I would like to start over with the affected signed zones. I made sure to commit all changes back to the file with rndc sync -clean And now I would like to start over by removing all signatures from the zone file and properly use inline-signing=yes with unsigned base files. dnssec-signzone can remove -Q inactive key or -R unpublished keys But I found no option to remove all signatures. How do I get to a pristine zone file without dnssec from a file with signatures? Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________ -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.