DNSSEC and slave zones? - knot-dns-users

6 Úno 2015

Good evening,

I don't seem to be able to configure Knot 1.6.1 to sign a zone it slaves
in:

        example.com {
                file "/usr/local/etc/knot/aa/example.com.zone";
                xfr-in home;

                dnssec-keydir "/usr/local/etc/knot/aa";
                dnssec-enable on;
        }

If I omit the two 'dnssec-*' parameters, the zone is slaved in. Adding
them, however, results in no transfer; log shows:

        notice: [example.com] automatic DNSSEC signing enabled, disabling incoming XFRs

Is it currently possible with Knot to sign a slaved zone?

Regards,

        -JP