]> git.ipfire.org Git - thirdparty/bind9.git/commit
Add a note about pregenarating keys for key rolls
authorMatthijs Mekking <matthijs@isc.org>
Fri, 11 Apr 2025 18:16:39 +0000 (13:16 -0500)
committerMatthijs Mekking <matthijs@isc.org>
Mon, 14 Apr 2025 14:27:25 +0000 (14:27 +0000)
commit9880bfff63d853629afb85394a65dd4eaf9f90b0
treed090222c78d1bc87651ce46fe0ef21a6b35135c6
parentb3ee5dc8f7f3da85411298dcda8a54e795b0f3bf
Add a note about pregenarating keys for key rolls

With dnssec-policy you can pregenerate keys and if they are eligible,
rather than creating a new key, a key is selected from the pregenerated
keys. A key is eligible if it is unused, i.e it has no key timing
metadata set.
doc/arm/dnssec.inc.rst