Re: Inline-signing / dnssec-policy: Signed SOA serial diverges from source serial causing monitoring warnings

Ondřej Surý <[email protected]> Tue, 21 Jul 2026 21:32:39 +0200
Newsgroups gmane.network.dns.bind9.user,gmane.network.dns.bind.user
Message-ID <[email protected]>
U09BIFNFUklBTCBpcyB1bnNpZ25lZCAzMi1iaXQgbnVtYmVyLgoKVGh1cyBhbnl0aGluZyB5b3Ug
d3JvdGUgYWJvdXQgdGhlIGludGVybmFsIHRpbWUgcmVwcmVzZW50YXRpb24ganVzdCBkb2VzbuKA
mXQgYXBwbHksIG5laXRoZXIgc2lnbmVkIDMyLWJpdCBub3IgNjQtYml0IHRpbWVfdCBoYXMgYW55
IGVmZmVjdCBvbiBTT0Egc2VyaWFsIGludGVnZXIgdHlwZS4KCk9uZMWZZWoKLS0KT25kxZllaiBT
dXLDvSAoSGUvSGltKQpvbmRyZWpAaXNjLm9yZwoKQURIRCBicmFpbiBhdCB3b3JrOiBJIHNvbWV0
aW1lcyBsb3NlIHRyYWNrIG9mIG15IGluYm94LiBQbGVhc2UgZmVlbCBmcmVlIHRvIHNlbmQgYSBn
ZW50bGUgbnVkZ2UgaWYgeW91J3JlIHdhaXRpbmcgb24gYSByZXBseSEKCk15IHdvcmtpbmcgaG91
cnMgYW5kIHlvdXIgd29ya2luZyBob3VycyBtYXkgYmUgZGlmZmVyZW50LiBQbGVhc2UgZG8gbm90
IGZlZWwgb2JsaWdhdGVkIHRvIHJlcGx5IG91dHNpZGUgeW91ciBub3JtYWwgd29ya2luZyBob3Vy
cy4KCj4gT24gMjEuIDcuIDIwMjYsIGF0IDIwOjQ3LCBQYXVsIEtvc2luc2tpIDxiaW5kQGltZW50
LmNvbT4gd3JvdGU6Cj4gCj4g77u/U29ycnksIEkgZm9yZ290IHRoYXQgaW4gb3JpZ2luYWwgVW5p
eCAoYW5kIG1hbnkgc3VjY2Vzc29ycywgc3VjaCBhcyBMaW51eCkgdGhlIHRpbWUgY291bnRlciBp
cyBhICpzaWduZWQqIDMyLWJpdCBudW1iZXIuIFNvIChhY2NvcmRpbmcgdG8gImh0dHBzOi8vZW4u
d2lraXBlZGlhLm9yZy93aWtpL1llYXJfMjAzOF9wcm9ibGVtIikgdGhlIGZpcnN0IHByb2JsZW0g
YXBwZWFycyBhdCAwMzoxNDowNyBVVEMgb24gMTkgSmFudWFyeSAyMDM4LiBUaGVuLCBkZXBlbmRp
bmcgb24gdGhlIGV4YWN0IGNvZGUgYmVoYXZpb3Igb24gb3ZlcmZsb3csIHRoZSAidGltZSIgZ29l
cyBuZWdhdGl2ZSwgYW5kIGJlY29tZXMgMjA6NDU6NTIgVVRDIG9uIDEzIERlY2VtYmVyIDE5MDEu
IEl0IHRoZW4gY291bnRzIGZvcndhcmQgZnJvbSB0aGF0LCBhbGwgdGhlIHdheSB1cCB0byAwMDow
MDowMCBVVEMgb24gMSBKYW51YXJ5IDE5NzAuIE1heWJlIHRoZSAyMTA2IGRhdGUgd291bGQgYXBw
bHkgaWYgdGhlIDMyLWJpdCB0aW1lIGNvdW50ZXIgd2VyZSB1bnNpZ25lZD8KPiAKPiBTaW5jZSAy
MDM4IGlzIG9ubHkgMTIgeWVhcnMgYXdheSwgeW91IHByb2JhYmx5IHdpbGwgY2FyZS4gKEkgbWln
aHQgbm90LCBzaW5jZSB0aGUgZmlyc3QgcHJvZ3JhbSBJIHdyb3RlIHdhcyBmb3IgdGhlIElCTSA3
MDQgYXQgQXJnb25uZSBOYXRpb25hbCBMYWIuKQo+IAo+IEluIGFueSBjYXNlLCBtYW55IHJlY2Vu
dCBzeXN0ZW1zIHVzZSBhIDY0LWJpdCBzZWNvbmRzIGNvdW50ZXIgKGNsb2NrKSwgc28gdGhleSB3
aWxsIG5vdCBvdmVyZmxvdyBmb3IgcXVpdGUgKCEpIGEgd2hpbGUuIEFsc28sIHRoZSBkZWNpbWFs
IHJlcHJlc2VudGF0aW9uIG9mIHN1Y2ggYSBVbml4VGltZSBwcmVzdW1hYmx5IGRvZXMgbm90IGhh
dmUgYSBsaW1pdCBvbiB0aGUgbnVtYmVyIG9mIGRpZ2l0cy4gVGh1cyBCSU5EIGNvdWxkIGVtaXQg
ZGVjaW1hbCBVbml4IHRpbWVzdGFtcHMgaW5kZWZpbml0ZWx5LCBldmVuIGJleW9uZCB3aGF0IGEg
NC1kaWdpdCB5ZWFyIGFsbG93cy4KPiAKPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KPiAK
Pj4gT24gVHVlLCAyMSBKdWwgMjAyNiAxOToxNjowNSArMDIwMAo+PiBPbmTFmWVqIFN1csO9IDxv
bmRyZWpAaXNjLm9yZz4gd3JvdGU6Cj4+IAo+PiBJIGRvbuKAmXQgdW5kZXJzdGFuZCB5b3VyIHF1
ZXN0aW9uLCBidXQgYWkgd2lsbCB0cnkgdG8gYW5zd2VyIGl0IGFueXdheS4KPj4gCj4+IFBlcnNv
bmFsbHksIEkgZG9u4oCZdCByZWFsbHkgY2FyZSB3aGF0IGhhcHBlbnMgaW4geWVhciAyMTA2IGFz
IEkgYW0gZ29pbmcgdG8gYmUgYWxyZWFkeSBkZWFkIGFueXdheSwgYnV0IHNlcmlhbCBudW1iZXIg
Zm9sbG93IHRoZSBzZXJpYWwgbnVtYmVyIGFyaXRobWV0aWNzIHdoaWNoIG1lYW5zIHRoZSBudW1i
ZXIgd2lsbCBqdXN0IHJvbGwgdG8gMCBhbmQgZXZlcnl0aGluZyB3aWxsIGNvbnRpbnVlIHRvIHdv
cmsgYXMgMl4zMi0xIGlzIGxlc3MgdGhhbiAwLgo+PiAKPj4gT25kxZllago+PiAKPj4+PiBPbiAy
MS4gNy4gMjAyNiwgYXQgMTk6MDAsIFBhdWwgS29zaW5za2kgPGJpbmRAaW1lbnQuY29tPiB3cm90
ZToKPj4+IAo+Pj4g77u/U28gQklORCdzIFVuaXhUaW1lLCBiZWluZyByZXByZXNlbnRlZCBpbiBk
ZWNpbWFsLCBhbGxvd3MgdmFsdWVzIGJleW9uZCAyXjMyLTEgd2l0aG91dCBhbnkgcHJvYmxlbT8K
Ci0tIApWaXNpdCBodHRwczovL2xpc3RzLmlzYy5vcmcvbWFpbG1hbi9saXN0aW5mby9iaW5kLXVz
ZXJzIHRvIHVuc3Vic2NyaWJlIGZyb20gdGhpcyBsaXN0Lgo=