Re: convert Knot DNS sigantures certs to BIND format.

2019-03-14 Thread Tony Finch
Milan Jeskynka Kazatel wrote: > > Now I´m able to sign my zone. But in dsset file, which should contain the > same DS as I already have in the parent zone a have different "keytag" and > different hash.  > > In my case is "keytag" in dsset file is 43120. OK, referring to your previous message...

Re: rndc and nsupdate failing to work for me

2019-03-14 Thread Marc Chamberlin via bind-users
On 03/14/2019 04:40 AM, Niall O'Reilly wrote: > On 14 Mar 2019, at 5:17, Marc Chamberlin via bind-users wrote: > >> On 03/13/2019 08:33 PM, John W. Blue wrote: >>> As an option, instead of including /etc/rndc.key nothing prevents you >>> from including rndc.conf.  That way you are consistent with y

Re: convert Knot DNS sigantures certs to BIND format.

2019-03-14 Thread Milan Jeskynka Kazatel
Hello Tony, ok, I did exactly what you adviced. Now I´m able to sign my zone. But in dsset file, which should contain the same DS as I already have in the parent zone a have different "keytag" and different hash.  In my case is "keytag" in dsset file is 43120. i.e. example.com.    IN DS

Re: rndc and nsupdate failing to work for me

2019-03-14 Thread Marc Chamberlin via bind-users
On 03/14/2019 12:02 AM, Mark Andrews wrote: > "rndc showzone" only works if you also have "allow-new-zones yes;” set. Really??? Wow! Thanks Mark! I would never have guessed that, but yes it does make rndc much happier! > > The last time there was a complaint about UPDATE’s not sticking the > startu

RE: DELV 9.12.3-P1 - Issue Loading Trusted Keys

2019-03-14 Thread LeBlanc, Daniel James
Thanks Evan for the quick response! I was using the delv command improperly. :-( Things appear to be working now. Daniel J. LeBlanc, P.Eng., MBA, DTME | Senior Network Architect | Bell Canada -Original Message- From: Evan Hunt [mailto:e...@isc.org] Sent: March-14-19 1:35 AM To: LeBlan

Re: convert Knot DNS sigantures certs to BIND format.

2019-03-14 Thread Tony Finch
Milan Jeskynka Kazatel wrote: > > When I tried to re-sign my zone in BIND by Webmin, then I get this error > message below. My original "keytag" is 43121. I don´t understand, where is > written information like example.com/ECDSAP256SHA256/45623 BIND often does not refer to key files by filename,

Re: convert Knot DNS sigantures certs to BIND format.

2019-03-14 Thread Milan Jeskynka Kazatel
Hollo Tony, many thanks, it´s an awesome trick. I can confirm, that I´m able to "hack" private and public key from KNOT. I tried to re-write information in .key and .private files in BIND, but now it seems to be an issue with the chain used in the zone. When I tried to re-sign my zone in

Re: rndc and nsupdate failing to work for me

2019-03-14 Thread Niall O'Reilly
On 14 Mar 2019, at 5:17, Marc Chamberlin via bind-users wrote: > On 03/13/2019 08:33 PM, John W. Blue wrote: >> >> As an option, instead of including /etc/rndc.key nothing prevents you >> from including rndc.conf.  That way you are consistent with your useage. Another option is to include rndc.ke

Re: rndc and nsupdate failing to work for me

2019-03-14 Thread Mark Andrews
"rndc showzone" only works if you also have "allow-new-zones yes;” set. The last time there was a complaint about UPDATE’s not sticking the startup procedure was wiping out the changes. Mark > On 14 Mar 2019, at 10:01 am, Marc Chamberlin via bind-users > wrote: > > Hello Bind Users, > > I ha