Using a PCIe HSM card with BIND

2025-03-12 Thread Sergio Ramirez
Hi, We need to integrate a "Thales Luna HSM PCIe 7" card, that we just purchased, with the most updated BIND version that works in this scenario. We had followed carefully the instructions given by the Thales documents but we had not succefull results. Also, we had contacted the Thales p

Singing a RRSET

2014-03-14 Thread Sergio Ramirez
Hi, We need to sign a RRSET individually out of the zone file. The utilities dnssec-signzone and similars from other packages check the zone before signing (SOA RR, DNSKEY RR, etc). Before to do a piece of programa to do this, we wanted to know if there is any tool to sign just a RRSET ? T

Re: Using a HSM card to sign zone

2014-02-17 Thread Sergio Ramirez
M card to sign zone On 2/14/14, 10:43 PM, Sergio Ramirez wrote: > Hi, > > We want to sign zones with bind using an HSM Luna PCI Safenet card. > > The command 'dnssec- keyfromlabel' fails: > > # /usr/local/sbin/dnssec-keyfromlabel -v 9 -E LunaCA3 -a RSA

Re: Using a HSM card to sign zone

2014-02-17 Thread Sergio Ramirez
- De: "Billy Glynn" Para: bind-users@lists.isc.org Enviados: Lunes, 17 de Febrero 2014 9:32:44 Asunto: Re: Using a HSM card to sign zone Did you configure bind with the patched version of openssl ? On 14 Feb 2014, at 19:43, Sergio Ramirez wrote: > Hi, > > We want to s

Using a HSM card to sign zone

2014-02-14 Thread Sergio Ramirez
Hi, We want to sign zones with bind using an HSM Luna PCI Safenet card. The command 'dnssec- keyfromlabel' fails: # /usr/local/sbin/dnssec-keyfromlabel -v 9 -E LunaCA3 -a RSASHA1 -l KSK1-testdnssec -f KSK testdnssec. dnssec-keyfromlabel: warning: ENGINE_load_private_key failed dnssec-keyfroml

Re: SIBLING GLUE address records (A or AAAA)

2009-10-05 Thread Sergio Ramirez
ervers for otherexample.xx. > > > On Mon, Oct 5, 2009 at 3:59 PM, Sergio Ramirez <mailto:srami...@seciu.edu.uy>> wrote: > > Hi, > > In the following example, the authoritive server for > zone .xx has configured the delegations of the zones example

SIBLING GLUE address records (A or AAAA)

2009-10-05 Thread Sergio Ramirez
Hi, In the following example, the authoritive server for zone .xx has configured the delegations of the zones example.xx and otherexample.xx: example.xx NS ns1.example.xx example.xx NS ns2.example.xx ns1.example.xx A 11.22.33.44 ns2.example.xx A 11.22.33.55 otherexample.xx NS ns3.example