Le vendredi 22 avril 2011 04:20, Security Admin (NetSec) a écrit : > I am running BIND 9.4.2-P2 on OpenBSD v4.8 > > I have created the ZSK and KSK and added the keys to my zonefile > "mydomain.hosts" using the "cat" command to append to the end of the host > file. > > When attempting to use the following command "dnssec-signzone -N INCREMENT > mydomain.hosts" I get the following error: > > dnssec-signzone: error: dns_master_load: mydomain.hosts:15: mydomain.com: > not at top of zone dnssec-signzone: failed loading zone from ' > mydomain.hosts': not at top of zone > > I own this domain and the DNS servers associated with them. Line 15 > referenced in the above error is an MX record within the host file. I am > unsure how to debug this error. Any help would be appreciated.
we sign areas as explained in the page of the isc we take 1 of 2 record DNSKEY we publish in the isc after you retrieve the record is dlv TXT resigns areas and wait for the secondaries restet -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7 gpg --keyserver pgp.mit.edu --recv-key 092164A7
pgpheC9C4tItj.pgp
Description: PGP signature
_______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users