From: Libor Peltan Date: Sat, 13 Jan 2018 11:25:25 +0000 (+0100) Subject: doc: updated onlinesign section to current limitations X-Git-Tag: v2.7.0~227^2~4 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9f69de74e5822301697802d31f15c0cf07d4e008;p=thirdparty%2Fknot-dns.git doc: updated onlinesign section to current limitations --- diff --git a/src/knot/modules/onlinesign/onlinesign.rst b/src/knot/modules/onlinesign/onlinesign.rst index 0617b31d1d..efb7e6093b 100644 --- a/src/knot/modules/onlinesign/onlinesign.rst +++ b/src/knot/modules/onlinesign/onlinesign.rst @@ -41,14 +41,12 @@ a DNSSEC validating resolver. * RRSIG records are synthesized for authoritative content of the zone. -.. rubric:: Known issues: - -* The delegations are not signed correctly. +* CDNSKEY and CDS records are generated as usual to publish valid Secure Entry Point. -* Some CNAME records are not signed correctly. +.. rubric:: Known issues: -* The automatic policy-based key rotation does not work well, as the rotation - events are invoked just at server (re)load. +* The `knotc zone-ksk-submitted` command does not work well and is discouraged. + The module must be reloaded afterwards. .. rubric:: Limitations: