Ticket #373 (closed defect: invalid)
Wrong DNSSEC Key type when going to NSEC3
|Reported by:||anon||Owned by:||ahu|
When you secure a zone it adds a
Then when you do set-nsec3 the keys are still RSA/SHA-256 keys but they should be RSASHA1-NSEC3-SHA1 keys
You have to delete all the keys and then add them in again after your set-nsec3
any new keys are with the right type.
if you set-nsec3 before the secure-zone the key type is still RSA/SHA-256 instead of RSASHA1-NSEC3-SHA1