diff --git a/bin/dnssec/dnssec-signzone.docbook b/bin/dnssec/dnssec-signzone.docbook index f0fcfe53f3..2b66b561ce 100644 --- a/bin/dnssec/dnssec-signzone.docbook +++ b/bin/dnssec/dnssec-signzone.docbook @@ -18,10 +18,10 @@ - PERFORMANCE OF THIS SOFTWARE. --> - + - June 30, 2000 + June 05, 2009 @@ -368,9 +368,10 @@ The post sign verification test ensures that for each algorithm - in use there is at least one non revoked self signed KSK key. - That all revoked KSK keys are self signed. That all records + in use there is at least one non revoked self signed KSK key, + that all revoked KSK keys are self signed, and that all records in the zone are signed by the algorithm. + This option skips these tests.