On Fri, Dec 03, 2010 at 02:55:22PM -0600, Martin McCormick wrote: > I am signing a test zone of okstate.edu and am having some > trouble with the command. The KSK went fine but when I try: > > dnssec-keygen -K /var/named/etc/namedb/dynamic/okstate.edu -s 7 RSASHA1 -b > 1024 -n ZONE okstate.edu
You missed out the -a before RSASHA1. (However, you don't need it in 9.7, as that's the default algorithm anyway. You can leave out the -b and -n options as well.) -- Evan Hunt -- e...@isc.org Internet Systems Consortium, Inc. _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
