Algorithm compatibility between BIND 9.6.2 and 9.16
Hello, I am new to BIND installation and configuration. We have been using a set of BIND 9.6.2 servers (one is master & other one is slave) running on Fedora Core 10 with algorithm as 'hmac-md5' for transferring zones and other DNS related data between Master-Slave. These BIND 9.6.2 server set was installed and configured by my predecessors for the domain 'example.com'(let us say) Our domain got changed recently to 'example.in' and and i setup newly released BIND 9.16 on CentOS 7.6 for this domain as authoritative NS and is working perfectly without any issues. For somtime we would like maintain both the domains 'example.com' & 'example.in' and planning to configure 'example.com' zone as slave in the new 9.16 server. I would like to know the support of algorithm 'hmac-md5' in the new release of BIND 9.16 for making the zone tranfer 'example.com' between the old master and new slave. If this algorithm is not supported, please let me know if any work around is possible to make the new BIND 9.16 as slave to 9.6 Any help is greatly appreciated Thanks in advance -- Regards, पं. विष्णु शंकर P. Vishnu Sankar टीम लीडर Team Leader सी-डॉट C-DOT इलैक्ट्रॉनिक्स सिटी फेज़ I Electronics City Phase I होसूर रोड बेंगलूरुHosur Road Bengaluru – 560100 फोन Ph 91 80 25119466 -- Disclaimer : This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. The sender does not accept liability for any errors or omissions in the contents of this message, which arise as a result. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Algorithm compatibility between BIND 9.6.2 and 9.16
Let me check. Thanks Anand. On 05-08-2020 15:14, Anand Buddhdev wrote: On 05/08/2020 10:43, pvs wrote: Hello Vishnu, [snip] I would like to know the support of algorithm 'hmac-md5' in the new release of BIND 9.16 for making the zone tranfer 'example.com' between the old master and new slave. Hello Vishnu, I urge you to read the man page of "tsig-keygen". You will find the answer in there. Regards, Anand Buddhdev -- Regards, पं. विष्णु शंकर P. Vishnu Sankar टीम लीडर Team Leader सी-डॉट C-DOT इलैक्ट्रॉनिक्स सिटी फेज़ I Electronics City Phase I होसूर रोड बेंगलूरुHosur Road Bengaluru – 560100 फोन Ph 91 80 25119466 -- Disclaimer : This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. The sender does not accept liability for any errors or omissions in the contents of this message, which arise as a result. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Algorithm compatibility between BIND 9.6.2 and 9.16
Yes Anand, hmac-md5 is supported. Thanks On 05-08-2020 15:47, pvs wrote: Let me check. Thanks Anand. On 05-08-2020 15:14, Anand Buddhdev wrote: On 05/08/2020 10:43, pvs wrote: Hello Vishnu, [snip] I would like to know the support of algorithm 'hmac-md5' in the new release of BIND 9.16 for making the zone tranfer 'example.com' between the old master and new slave. Hello Vishnu, I urge you to read the man page of "tsig-keygen". You will find the answer in there. Regards, Anand Buddhdev -- Regards, पं. विष्णु शंकर P. Vishnu Sankar टीम लीडर Team Leader सी-डॉट C-DOT इलैक्ट्रॉनिक्स सिटी फेज़ I Electronics City Phase I होसूर रोड बेंगलूरुHosur Road Bengaluru – 560100 फोन Ph 91 80 25119466 -- Disclaimer : This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. The sender does not accept liability for any errors or omissions in the contents of this message, which arise as a result. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
dnssec-key 'unknown algorithm RSASHA512'
Hello, I'm using ubuntu 22.04 server on which bind 9.18.8 service is running. I'm trying to generate dnssec-key by using the command "dnssec-keygen -a RSASHA512 -b 2048 -n zone example.com" After doing this, it is generating both public key and private key. When I generate a file with aprivate key in /etc/bind directory, it is throwing error 'unknown algorithm 'RSASHA512' Same error is thrown when tried with other algorithms like ECDSAP256SHA256, RSASHA1, RSASHA256 etc Any help is greatly appreciated. -- Regards, पं. विष्णु शंकर P. Vishnu Sankar टीम लीडरTeam Leader-Network Operations सी-डॉट C-DOT इलैक्ट्रॉनिक्स सिटी फेज़ IElectronics City Phase I होसूर रोड बेंगलूरु Hosur Road Bengaluru – 560100 फोन Ph91 80 25119466 -- Disclaimer : This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. The sender does not accept liability for any errors or omissions in the contents of this message, which arise as a result. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
