From c5d6769e11cfbce258017f13a8164005644747ff Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Tue, 7 May 2024 13:10:07 +0200 Subject: [PATCH] Update DNSSEC Operational Practices references to Version 2 RFC 4641 was obsoleted by 6781. --- bin/dnssec/dnssec-signzone.rst | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/bin/dnssec/dnssec-signzone.rst b/bin/dnssec/dnssec-signzone.rst index e6fb455c3d..21a9152f85 100644 --- a/bin/dnssec/dnssec-signzone.rst +++ b/bin/dnssec/dnssec-signzone.rst @@ -273,7 +273,7 @@ Options with cached copies of the old DNSKEY RRset. The :option:`-Q` option forces :program:`dnssec-signzone` to remove signatures from keys that are no longer active. This enables ZSK rollover using the procedure described in - :rfc:`4641#4.2.1.1` ("Pre-Publish Key Rollover"). + :rfc:`6781#4.1.1.1` ("Pre-Publish Key Rollover"). .. option:: -q @@ -290,7 +290,7 @@ Options This option is similar to :option:`-Q`, except it forces :program:`dnssec-signzone` to remove signatures from keys that are no longer published. This enables ZSK rollover using the procedure described in - :rfc:`4641#4.2.1.2` ("Double Signature Zone Signing Key + :rfc:`6781#4.1.1.2` ("Double Signature Zone Signing Key Rollover"). .. option:: -S @@ -443,4 +443,4 @@ See Also ~~~~~~~~ :iscman:`dnssec-keygen(8) `, BIND 9 Administrator Reference Manual, :rfc:`4033`, -:rfc:`4641`. +:rfc:`6781`.