Re: Strange issue with signed zone

2012-11-09 Thread Peter Andreev
2012/11/9 Peter Andreev : > 2012/11/9 Tony Finch : >> Peter Andreev wrote: >>> >>> We signed another zone and met the same problem again. The only >>> difference is algorithm - now it is RSASHA256. >>> >>> > We have ~30 servers running BIND (9.8, 9.7, 9.6). A week ago we >>> > signed first of our

Re: Strange issue with signed zone

2012-11-09 Thread Peter Andreev
2012/11/9 Tony Finch : > Peter Andreev wrote: >> >> We signed another zone and met the same problem again. The only >> difference is algorithm - now it is RSASHA256. >> >> > We have ~30 servers running BIND (9.8, 9.7, 9.6). A week ago we >> > signed first of our zones with RSA/SHA1 + NSEC3 + OPT-O

Re: Strange issue with signed zone

2012-11-09 Thread Tony Finch
Peter Andreev wrote: > > We signed another zone and met the same problem again. The only > difference is algorithm - now it is RSASHA256. > > > We have ~30 servers running BIND (9.8, 9.7, 9.6). A week ago we > > signed first of our zones with RSA/SHA1 + NSEC3 + OPT-OUT. > > Recently we realised th