RE: how to modify the cache

2014-02-16 Thread houguanghua
John, I want to override the IP address of NS, for I want to use other authority DNS which isn't registered. Regards, Guanghua Date: Fri, 14 Feb 2014 11:28:58 -0500 Subject: Re: how to modify the cache From: johnm...@brandeis.edu To: houguang...@hotmail.com CC: bind-users@lists.isc.org Are

Re: Using a HSM card to sign zone

2014-02-16 Thread Emil Natan
Hi, I have tested Safenet's Luna SA (the network appliance and not the card) a year ago. It did not work using the openssl patch provided with BIND, but at the end with some assistance from the Safenet's engineers and a proprietary engine provided by them we made it work. I presume it'll work also

Re: Using a HSM card to sign zone

2014-02-16 Thread Alan Clegg
On 2/14/14, 10:43 PM, Sergio Ramirez wrote: > Hi, > > We want to sign zones with bind using an HSM Luna PCI Safenet card. > > The command 'dnssec- keyfromlabel' fails: > > # /usr/local/sbin/dnssec-keyfromlabel -v 9 -E LunaCA3 -a RSASHA1 -l > KSK1-testdnssec -f KSK testdnssec. > dnssec-keyfrom