Hi Andreas,
have you read the documentation?
https://www.knot-dns.cz/docs/2.9/singlehtml/index.html#dnssec-key-rollovers
If something curical is missing there, we might want to update it.
Please tell us after you do your experiments ;)
Libor
Dne 11.01.20 v 13:15 A. Schulze napsal(a):
Hello,
I'm new to that list. Using NSD + DNSSEC + key rotation for many years.
Now I like to check if and how KNOT's auto keyrotaton can safe me from my ugly script
foo...
https://lists.nic.cz/pipermail/knot-dns-users/2019-November/001721.html
JP Mens mention "I'm rolling the KSK every five minutes for testing"
instead I reinvent the wheel: could one post the relevant settings?
Thanks,
Andreas