Hi Daniel,
On 28 Nov 2025, at 15:09, Daniel Salzman via
knot-dns-users <knot-dns-users(a)lists.nic.cz> wrote:
Are you able to reproduce the issue with a different key set?
Yes, but always the same kind, RSASHA256 outgoing, ECDSAP256SHA256 incoming.
Starts happening after I run knotc zone-ksk-submitted.
How do you synchronize data in softhsm? Do you simply
replace the whole directory?
The script cleans the destination directory, rsyncs the results of knotc zone-backup and
runs knotc zone-restore on the destination host.
.einar