From: Libor Peltan Date: Tue, 2 Aug 2022 13:45:27 +0000 (+0200) Subject: doc: warn that double-ds is not double-ds X-Git-Tag: v3.3.dev~31^2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=be3715e77eea18cd9cb0b11bcafbbedfca07f1ff;p=thirdparty%2Fknot-dns.git doc: warn that double-ds is not double-ds --- diff --git a/doc/man/knot.conf.5in b/doc/man/knot.conf.5in index c11545e964..f2578968cf 100644 --- a/doc/man/knot.conf.5in +++ b/doc/man/knot.conf.5in @@ -1810,6 +1810,14 @@ more records depending on the keys available. .UNINDENT .UNINDENT .sp +\fBWARNING:\fP +.INDENT 0.0 +.INDENT 3.5 +The \fBdouble\-ds\fP value does not trigger double\-DS roll\-over method. That method is +only suppored by Knot when performed manually, with unset \fI\%ksk\-submission\fP\&. +.UNINDENT +.UNINDENT +.sp \fIDefault:\fP \fBrollover\fP .SS cds\-digest\-type .sp diff --git a/doc/reference.rst b/doc/reference.rst index 3a771ca673..fa9745fb43 100644 --- a/doc/reference.rst +++ b/doc/reference.rst @@ -2007,6 +2007,10 @@ Possible values: If the zone keys are managed manually, the CDS and CDNSKEY rrsets may contain more records depending on the keys available. +.. WARNING:: + The ``double-ds`` value does not trigger double-DS roll-over method. That method is + only suppored by Knot when performed manually, with unset :ref:`policy_ksk-submission-check`. + *Default:* ``rollover`` .. _policy_cds-digest-type: