Re: Problem with DNSSEC signing zone

2012-07-20 Thread Doug Barton
On 07/20/2012 07:05, Casey Deccio wrote: > On Fri, Jul 20, 2012 at 2:52 AM, William Thierry SAMEN > mailto:thierry.sa...@gmail.com>> wrote: > > i just have a problem with my zone signing output i made all the > steps to obtain a good result. > > ... > > my zone name is *willzik.co.uk

RE: Problem with DNSSEC signing zone

2012-07-20 Thread Spain, Dr. Jeffry A.
> all this step has been well done, but the last step: > Generate DS records and provide them to your registrar. > has not been fluent for me. I found how can i provide key to the registrar i > used this command: > dnssec-dsfromkey -2 Kwillzik.co.uk KSK.key  "is it the good way to do?" That comma

Re: Problem with DNSSEC signing zone

2012-07-20 Thread Casey Deccio
On Fri, Jul 20, 2012 at 2:52 AM, William Thierry SAMEN < thierry.sa...@gmail.com> wrote: > i just have a problem with my zone signing output i made all the steps to > obtain a good result. ... > my zone name is *willzik.co.uk* > ** > I'm getting an NXDOMAIN response from the co.uk servers, rathe

RE: Problem with DNSSEC signing zone

2012-07-20 Thread Spain, Dr. Jeffry A.
> 1. Generated KSK and ZSK > 2.Add both of keys at the end of my zone file > 3.signing my zone with dnssec-signzone command > 4.enable dnssec in named options > 5.change the name of my zone in the named by namezone.signed > 6.I got the root DNSKEY RR set before with dig comm

Re: Problem with DNSSEC signing zone

2012-07-20 Thread Carsten Strotmann
Hello Thierry SAMEN, On Fri, 20 Jul 2012, William Thierry SAMEN wrote: Hi all Bind users, i just have a problem with my zone signing output i made all the steps to obtain a good result. 1.  Generated KSK and ZSK 2. Add both of keys at the end of my zone file 3. signing my zone with dnssec-s

Problem with DNSSEC signing zone

2012-07-20 Thread William Thierry SAMEN
Hi all Bind users, i just have a problem with my zone signing output i made all the steps to obtain a good result. 1. Generated KSK and ZSK 2. Add both of keys at the end of my zone file 3. signing my zone with dnssec-signzone command 4. enable dnssec in named options 5. change the