Milan Jeskynka Kazatel wrote:
>
> Now I´m able to sign my zone. But in dsset file, which should contain the
> same DS as I already have in the parent zone a have different "keytag" and
> different hash.
>
> In my case is "keytag" in dsset file is 43120.
OK, referring to your previous message...
On 03/14/2019 04:40 AM, Niall O'Reilly wrote:
> On 14 Mar 2019, at 5:17, Marc Chamberlin via bind-users wrote:
>
>> On 03/13/2019 08:33 PM, John W. Blue wrote:
>>> As an option, instead of including /etc/rndc.key nothing prevents you
>>> from including rndc.conf. That way you are consistent with y
Hello Tony,
ok, I did exactly what you adviced.
Now I´m able to sign my zone. But in dsset file, which should contain the
same DS as I already have in the parent zone a have different "keytag" and
different hash.
In my case is "keytag" in dsset file is 43120.
i.e.
example.com. IN DS
On 03/14/2019 12:02 AM, Mark Andrews wrote:
> "rndc showzone" only works if you also have "allow-new-zones yes;” set.
Really??? Wow! Thanks Mark! I would never have guessed that, but yes it
does make rndc much happier!
>
> The last time there was a complaint about UPDATE’s not sticking the
> startu
Thanks Evan for the quick response!
I was using the delv command improperly. :-( Things appear to be working now.
Daniel J. LeBlanc, P.Eng., MBA, DTME | Senior Network Architect | Bell Canada
-Original Message-
From: Evan Hunt [mailto:e...@isc.org]
Sent: March-14-19 1:35 AM
To: LeBlan
Milan Jeskynka Kazatel wrote:
>
> When I tried to re-sign my zone in BIND by Webmin, then I get this error
> message below. My original "keytag" is 43121. I don´t understand, where is
> written information like example.com/ECDSAP256SHA256/45623
BIND often does not refer to key files by filename,
Hollo Tony,
many thanks, it´s an awesome trick.
I can confirm, that I´m able to "hack" private and public key from KNOT. I
tried to re-write information in .key and .private files in BIND, but now it
seems to be an issue with the chain used in the zone.
When I tried to re-sign my zone in
On 14 Mar 2019, at 5:17, Marc Chamberlin via bind-users wrote:
> On 03/13/2019 08:33 PM, John W. Blue wrote:
>>
>> As an option, instead of including /etc/rndc.key nothing prevents you
>> from including rndc.conf. That way you are consistent with your useage.
Another option is to include rndc.ke
"rndc showzone" only works if you also have "allow-new-zones yes;” set.
The last time there was a complaint about UPDATE’s not sticking the
startup procedure was wiping out the changes.
Mark
> On 14 Mar 2019, at 10:01 am, Marc Chamberlin via bind-users
> wrote:
>
> Hello Bind Users,
>
> I ha
9 matches
Mail list logo