How to manually replace zsk that is ready to expire?
I want to centrally generate zsk and distribute it to other machines. This is to ensure that the dnskey information requested by different machines is consistent.
The current idea is to use knots to smoothly replace the zsk being used without the need to restart the process. But currently, no smooth replacement solution has been found in the knot. Perhaps my current understanding of knots is not sufficient. May I ask if there are any good solutions to this problem?
Looking forward to your reply!