[GH-ISSUE #163] DNSSEC enabled zones are not automaticly rectified on update #108

New issue

Closed

opened 2026-02-28 01:21:01 +03:00 by kerem · 1 comment

kerem commented

2026-02-28 01:21:01 +03:00

Owner

Originally created by @webvanced on GitHub (Dec 20, 2017).
Original GitHub issue: https://github.com/tuxis-ie/nsedit/issues/163

At this moment i have to manually run pdnsutil rectify-zone to rectify the zone for correct NSEC ordering.

DNSSEC-enabled zones should be rectified after changing the zone data. This can be done by the API automatically after a change when the API-RECTIFY metadata is set. When creating or updating a zone, the “api_rectify” field of the Zone can be set to true to enable this behaviour.

Or the rectifying should be done after updating the zone by PUT /servers/{server_id}/zones/{zone_id}/rectify

Originally created by @webvanced on GitHub (Dec 20, 2017). Original GitHub issue: https://github.com/tuxis-ie/nsedit/issues/163 At this moment i have to manually run pdnsutil rectify-zone to rectify the zone for correct NSEC ordering. DNSSEC-enabled zones should be rectified after changing the zone data. This can be done by the API automatically after a change when the API-RECTIFY metadata is set. When creating or updating a zone, the “api_rectify” field of the Zone can be set to true to enable this behaviour. Or the rectifying should be done after updating the zone by PUT /servers/{server_id}/zones/{zone_id}/rectify

kerem closed this issue

2026-02-28 01:21:01 +03:00

kerem commented

2026-02-28 01:21:02 +03:00

Author

Owner

@webvanced commented on GitHub (Jan 9, 2018):

This can be done automaticly in powerdns >= 4.1. Setting domain meta data API-RECTIFY=1 after securing a domain and run a rectify domain:

pdnsutil set-meta domain.nl API-RECTIFY 1
pdnsutil rectify-zone domain.nl

I willl close this issue because it can be handled by powerdns itself now.

@webvanced commented on GitHub (Jan 9, 2018): This can be done automaticly in powerdns >= 4.1. Setting domain meta data API-RECTIFY=1 after securing a domain and run a rectify domain: pdnsutil set-meta domain.nl API-RECTIFY 1 pdnsutil rectify-zone domain.nl I willl close this issue because it can be handled by powerdns itself now.

kerem referenced this issue

2026-02-28 01:21:18 +03:00

[PR #108] [MERGED] Ability to rotate logs #174