Re: PKCS#11 vs OpenSSL (BIND Future Development Question)

2018-06-04 Thread Mathieu Arnold
h/to/engine.so. At least, it is the way it is done in the FreeBSD ports tree. -- Mathieu Arnold signature.asc Description: PGP signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users maili

problem with latest BIND9 9.11 from git

2016-04-29 Thread Mathieu Arnold
going to comment out the missing man page. Also, right now, it installs all the .py{,c} files ${libdir} which is /usr/local/lib, and I don't think it is a good thing. -- Mathieu Arnold pgpc0qEL2nh4k.pgp Description: PGP signature ___ Please visit ht

Re: compile and install from source

2015-03-31 Thread Mathieu Arnold
configure options the port has. | is named_chrootdir="/var/named" not correct? It is. -- Mathieu Arnold ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: compile and install from source

2015-03-31 Thread Mathieu Arnold
is no CHROOT options, there is a named_chrootdir rc variable to setup. And it has been committed. Trust me. -- Mathieu Arnold ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-

Re: compile and install from source

2015-03-30 Thread Mathieu Arnold
quot; was regarding the chroot thing. -- Mathieu Arnold ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: compile and install from source

2015-03-30 Thread Mathieu Arnold
ed" Nope, you should use: named_chrootdir="/var/named" | syslogd_flags="-s -l /var/named/dev/log" And I think that should be written as: altlog_proglist="named" | Use the rc script /usr/local/etc/rc.d/named to start and stop the BIND | process. -- Mathieu Arnold __

Re: compile and install from source

2015-03-30 Thread Mathieu Arnold
c.d/named start | Starting named. | /etc/rc.d/named: WARNING: failed to start named | | But nothing is logged in /var/log/messages | | For now, I am pointing back to the old 9.8.4 version. Have you tried running it manually to see what it says ? -- Mathieu Arnold

Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread Mathieu Arnold
+--On 12 septembre 2014 08:58:18 -0500 "Jeremy C. Reed" wrote: | On Fri, 12 Sep 2014, Mathieu Arnold wrote: | |> Yes, you can't use bmake if you try to build the python bits, I had to |> force gmake in the port: | | It looks to be a bug in the NetBSD bmake used by FreeBS

Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread Mathieu Arnold
s/head/dns/bind910/Makefile?annotate=367505#l119> -- Mathieu Arnold ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND 9.10.0b1 is now available

2014-03-17 Thread Mathieu Arnold
+--On 17 mars 2014 14:43:36 -0700 Doug Barton wrote: | On 03/17/2014 01:06 PM, Evan Hunt wrote: |> On Mon, Mar 17, 2014 at 08:41:13PM +0100, Mathieu Arnold wrote: |>> Yes, it was my understanding of how HSM worked. That's why I was trying |>> to build with OpenSSL *and* nativ

Re: BIND 9.10.0b1 is now available

2014-03-17 Thread Mathieu Arnold
+--On 17 mars 2014 12:36:32 -0700 Doug Barton wrote: | On 03/17/2014 12:29 PM, Mathieu Arnold wrote: |> Hum, so, it will also use pkcs11 for dnssec validation too ? (Sorry if |> this seems a silly question.) | | HSMs are typically an auth-only tool, although I suppose that in a | supe

Re: BIND 9.10.0b1 is now available

2014-03-17 Thread Mathieu Arnold
know if I could switch the default BIND package from using openssl to using openssl through pkcs11) Regards, -- Mathieu Arnold ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind

Re: BIND 9.10.0b1 is now available

2014-03-17 Thread Mathieu Arnold
'm currently writing (as the beta comes out) it seems you can only build it either with openssl or with native-pkcs11, which is a bit strange. As for trying it, no, making it compile is already somewhat a challenge... -- Mathieu Arnold ___ Please vi