Re: NSD and DNSSEC signature refreshing and ZSK rotation

Paul Wouters <[email protected]> Thu, 15 Feb 2018 00:07:40 -0500

Newsgroups	gmane.network.dns.nsd.general
Message-ID	<[email protected]>

> On Feb 14, 2018, at 20:02, Jasper Wallace <[email protected]> wrote:
> 
> 
> Hi,
> 
> When NSD serves a signed zone will it also re-sign it and rotate ZSK's as 
> needed? Or do you have to use e.g. OpenDNSSEC to handle it?

You need opendnssec or another tool that handles key management and signing. nsd just serves the dns data 

Paul