diff options
| author | Filip Široký <filip.siroky@nic.cz> | 2016-12-19 14:50:43 +0100 |
|---|---|---|
| committer | Filip Široký <filip.siroky@nic.cz> | 2017-01-06 12:16:59 +0100 |
| commit | 2a976193c284bfdb8ffe4cf30836d43996c56956 (patch) | |
| tree | 7bfef43065cd9ebf9d5b946fed19e2a78f70e44a /doc/configuration.rst | |
| parent | dnssec: add keyusage + removing retired dnssec keys (diff) | |
| download | knot-2a976193c284bfdb8ffe4cf30836d43996c56956.tar.xz knot-2a976193c284bfdb8ffe4cf30836d43996c56956.zip | |
keyusage: add documentation
Diffstat (limited to 'doc/configuration.rst')
| -rw-r--r-- | doc/configuration.rst | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/doc/configuration.rst b/doc/configuration.rst index 448523570..97978b707 100644 --- a/doc/configuration.rst +++ b/doc/configuration.rst @@ -438,3 +438,15 @@ of the limitations will be hopefully removed in the near future. - Legacy key import requires a private key. - Legacy key export is not implemented. - DS record export is not implemented. + +.. _dnssec-keyusage: + +DNSSEC keys used by multiple zones +---------------------------------- + +Using same key for multiple zones with automatic key management is possible. +However, all zones must be listed in keyusage (keys directory) or they will be deleted, +when they retire in any zone. + +If keys are added manually as published, but not active (for next rollover event), they are added automatically. + |