Re: managed-keys vs trust-anchors

2023-01-04 Thread Evan Hunt
On Wed, Jan 04, 2023 at 03:25:10PM -0500, Bob McDonald wrote: > Thanks Evan and Ondrej. I'll let the folks at FreeBSD know also. Their > bind packages still include that file. The file itself is harmless. But we used to say it was best practice to check for updates at the ISC website before turni

Re: managed-keys vs trust-anchors

2023-01-04 Thread Bob McDonald
Thanks Evan and Ondrej. I'll let the folks at FreeBSD know also. Their bind packages still include that file. Bob On Wed, Jan 4, 2023, 14:59 Evan Hunt wrote: > On Mon, Jan 02, 2023 at 07:33:46AM -0500, Bob McDonald wrote: > > I've upgraded to bind 9.16.36. > > > > I went to the ISC site and p

Re: managed-keys vs trust-anchors

2023-01-04 Thread Evan Hunt
On Mon, Jan 02, 2023 at 07:33:46AM -0500, Bob McDonald wrote: > I've upgraded to bind 9.16.36. > > I went to the ISC site and picked up the bind.keys file. > > However, it is intended for use in bind 9.11 and contains the managed-keys > clause. This throws an error in the syslog messages during s

Re: managed-keys vs trust-anchors

2023-01-02 Thread Ondřej Surý
Hi Bob, no manually configured bind.keys file is needed. Just don't provide one and correct compiled-in defaults will be used. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal worki

managed-keys vs trust-anchors

2023-01-02 Thread Bob McDonald
I've upgraded to bind 9.16.36. I went to the ISC site and picked up the bind.keys file. However, it is intended for use in bind 9.11 and contains the managed-keys clause. This throws an error in the syslog messages during startup. It appears to still function correctly. In the ARM for bind 9.16