Re: DNSSEC - NSEC3 - name.c:1715: INSIST(nlabels == name->labels) failed

2012-07-09 Thread Noel Rocha
Solved: I recompiled the bind9's package(9.8.1 - last version for ubuntu 12.04 LTS)to the Ubuntu 10.04. Now, works fine. Thank you, On 07/06/2012 04:01 PM, Noel Rocha wrote: On 07/06/2012 02:14 PM, Evan Hunt wrote: On Fri, Jul 06, 2012 at 12:18:10PM -0300, Noel Rocha wrote: I have

Re: DNSSEC - NSEC3 - name.c:1715: INSIST(nlabels == name->labels) failed

2012-07-06 Thread Noel Rocha
On 07/06/2012 02:14 PM, Evan Hunt wrote: On Fri, Jul 06, 2012 at 12:18:10PM -0300, Noel Rocha wrote: I have this error in my bind9(9.7.0 - last version for ubuntu 10.04 LTS): Do you remember the bug's name or number? I'll search on ubuntu repository a binds version with this b

Re: DNSSEC - NSEC3 - name.c:1715: INSIST(nlabels == name->labels) failed

2012-07-06 Thread Noel Rocha
Thank you, I'll turn off the dnssec for zone with problem while I'll update the ubuntu/bind. Best regards, On 07/06/2012 02:14 PM, Evan Hunt wrote: On Fri, Jul 06, 2012 at 12:18:10PM -0300, Noel Rocha wrote: I have this error in my bind9(9.7.0 - last version for ubuntu 10.04 LTS

DNSSEC - NSEC3 - name.c:1715: INSIST(nlabels == name->labels) failed

2012-07-06 Thread Noel Rocha
uld return a NSEC3 record, but is returned that error. I have more 3 servers with same configuration(software and hardware) but only this server gives error. I cant undestand, Why only one server gives error? Suggestions? And any solutions? Thanks in advanced, Best r

Re: ksk in a volume

2011-06-15 Thread Noel Rocha
zone is updatable there is no point in doing so. Mark In message<4df649b5@noelrocha.com>, Noel Rocha writes: Hello, I'm having this error after add RR using nsupdate: named[18254]: dns_dnssec_findzonekeys2: error reading private key file my.zone.com/NSEC3RSASHA1/42969: fil

Re: ksk in a volume

2011-06-13 Thread Noel Rocha
nskey: - options { [..] dnssec-dnskey-kskonly yes; update-check-ksk yes; } - Can't I store private ksk in my other machine for secutiry questions? Can I ignoring this error? Recommendations? Thanks in advance, Noel Rocha

ksk in a volume

2011-06-10 Thread Noel Rocha
Hello, I have a question about dnssec when zones are dynamically updated and very time are changed for users. KSK needs be stored in "key-directory"? I want to store in unmounted volume and I will mount when is need. P.S: I have some KSKs and ZSKs. Thanks in advance,

Re: dnssec-keygen with different activation date

2011-05-20 Thread Noel Rocha
I found this on our list: https://lists.isc.org/mailman/htdig/bind-users/2010-April/079653.html Made ​​more sense. :) On 05/20/2011 08:41 PM, Noel Rocha wrote: Hello, I don't know if this is a problem ... but I found strange: # date on server: $ date Fri May 20 20:31:23 BRT 2011 # key

dnssec-keygen with different activation date

2011-05-20 Thread Noel Rocha
Kmydomain.com.+005+48738 # Showing activate date $ cat Kmydomain.com.+005+48738.key | grep Activate ; Activate: 20110520203500 (Fri May 20 17:35:00 2011) This (20110520203500)2011/05/20 20:35:00 isn't "Fri May 20 17:35:00 2011." :( Anyone have idea how to solve this