Thanks, that did the trick!
On 3/8/12, Mark Andrews wrote:
>
> In message
>
> , Nick Edwards writes:
>> On 3/8/12, Nick Edwards wrote:
>> > On 3/7/12, Mark Andrews wrote:
>> >
>> >>> resigned it again as about 3 months using:dnssec-signzone -a -e
>> >>> +15724800 -K keys/ -N INCREMENT gui
In message
, Nick Edwards writes:
> On 3/8/12, Nick Edwards wrote:
> > On 3/7/12, Mark Andrews wrote:
> >
> >>> resigned it again as about 3 months using:dnssec-signzone -a -e
> >>> +15724800 -K keys/ -N INCREMENT guilty_domain.here
> >>
> >> You should have fed dnssec-signzone the old sign
On 3/8/12, Nick Edwards wrote:
> On 3/7/12, Mark Andrews wrote:
>
>>> resigned it again as about 3 months using:dnssec-signzone -a -e
>>> +15724800 -K keys/ -N INCREMENT guilty_domain.here
>>
>> You should have fed dnssec-signzone the old signed zone not the unsigned
>> zone.
>>
>> dnssec-sig
On 3/7/12, Mark Andrews wrote:
>> resigned it again as about 3 months using:dnssec-signzone -a -e
>> +15724800 -K keys/ -N INCREMENT guilty_domain.here
>
> You should have fed dnssec-signzone the old signed zone not the unsigned
> zone.
>
> dnssec-signzone -f guilty_domain.here.signed -N
In message
, Nick Edwards writes:
> I am an old hand at bind, but - DNSSEC Newbie alert :->
>
> I am after clarification on how slaves handle DNSSEC.
>
> I have two slaves, both were stale, like since Feb 9 ! One I directly
> control, the second, I do not, so I can not provide details on how
>
I am an old hand at bind, but - DNSSEC Newbie alert :->
I am after clarification on how slaves handle DNSSEC.
I have two slaves, both were stale, like since Feb 9 ! One I directly
control, the second, I do not, so I can not provide details on how
that one is configured, but given it is a reputab
6 matches
Mail list logo
