Re: auto-dnssec resign timers

2010-09-17 Thread Niobos
On 2010-09-17 19:50, Tony Finch wrote: > On 17 Sep 2010, at 14:10, Niobos > wrote: >> >> Is the current version of the ARM available online somewhere? > > http://dotat.at/tmp/arm97/ > > IIRC the specific version that comes from is 9.7.1p2. Thanks for the quick and

Re: auto-dnssec resign timers

2010-09-17 Thread Tony Finch
On 17 Sep 2010, at 14:10, Niobos wrote: > > Is the current version of the ARM available online somewhere? http://dotat.at/tmp/arm97/ IIRC the specific version that comes from is 9.7.1p2. Tony. -- f.anthony.n.finchhttp://dotat.at/___ bind-users ma

Re: auto-dnssec resign timers

2010-09-17 Thread David Forrest
On Fri, 17 Sep 2010, Niobos wrote: Is the current version of the ARM available online somewhere? Thx, Niobos It is in the doc directory of the source for the subject binary, in html and pdf formats. Dave -- St. Louis, Missouri ___ bind-users mai

Re: auto-dnssec resign timers

2010-09-17 Thread Niobos
On 2010-09-17 12:15, Tony Finch wrote: > On 17 Sep 2010, at 10:44, Niobos > wrote: >> >> In my opinion, BIND should have resigned this by now: The signature is >> valid until a little over 2 days. This means that if the slave would >> loose contact with the master ri

Re: auto-dnssec resign timers

2010-09-17 Thread Tony Finch
On 17 Sep 2010, at 10:44, Niobos wrote: > > In my opinion, BIND should have resigned this by now: The signature is > valid until a little over 2 days. This means that if the slave would > loose contact with the master right now, it will give out signatures > that will expire before their TTL does

auto-dnssec resign timers

2010-09-17 Thread Niobos
Hi, I'm experimenting with the auto-dnssec feature of bind 9.7.0-P1. I know it's outdated; I did skim over the changelog up until 9.7.2rc2, and didn't find anything that seems like this issue. This query demonstrates the issue: ; <<>> DiG 9.6.0-APPLE-P2 <<>> +dnssec SOA dnssec.dest-unreach.be @im