What causes named-checkzone to provide ; resign strings?
We have a series of bind9 nameservers (running some 9.9 and some 9.10). On our slave zones, which are all reading identical slave zone files, one of our servers is running the RedHat default bind 9.9.4-74. The other servers are running bind compiled directly from isc's source. When we issue a named-checkzone on any of the ones compiled straight from isc's source, after every RRSIG line, we see a ; resign line that contains the date/time of that resign. When we issue the same command on RedHat's default, we get all of the same information, minus that line. I was wondering if anyone could tell me what exactly produces that line. I see in the bind source code a comment that it is "Only valid if DNS_RDASETATTR_RESIGN is set in attributes." Where would this be set? If it's in the attributes of the signed zone file, I would think that it should be there, as when any other server reads the same files the data appears. Is this some compile time option? Is there a config file somewhere on the Linux server itself that needs to set this? Really any pointer in the right direction would be appreciated.
Example of the symptom:
first the server running RedHat standard, that does not produce the ; resign line