Re: problem for validate the script dnssec to isc dlv

2011-03-28 Thread fakessh @
it is, I'm coming I do not understand the need to recreate and validate the file keyset-en ... I then recreate a good record with the key in this file and my past signatures are good. I did not understand correctly the operation of dlv keyset files and I recreated downgrade bind to the stable

Re: problem for validate the script dnssec to isc dlv

2011-03-28 Thread Eivind Olsen
> dns appear as my syncro. > yet I'm still at the same point > missing keys Your delegation for the domain fakessh.eu doesn't seem to be 100% correct yet though. If I ask the nameservers for .eu (like p.nic.eu) it tells me your domain belongs to 4 nameservers: ns0.xname.org ns1.xname.org ns1.nov

Re: problem for validate the script dnssec to isc dlv

2011-03-27 Thread Mark Andrews
In message <1301245765.12273.198.camel@localhost.localdomain>, "fakessh @" writes: > in insurance I googled > no result > > how to do this ... https://dlv.isc.org Click on "Login". Enter you user name and password. You should see "fakessh.eu" in the table of zones. Click on "(add)" under "Keys"

Re: problem for validate the script dnssec to isc dlv

2011-03-27 Thread fakessh @
dns appear as my syncro. yet I'm still at the same point missing keys Le lundi 28 mars 2011 à 00:45 +0200, fakessh @ a écrit : > I removed the dns that does not support dnssec > > Now it is necessary to wait a day or two > > Le dimanche 27 mars 2011 à 20:58 +0200, Torinthiel a écrit : > > On 0

Re: problem for validate the script dnssec to isc dlv

2011-03-27 Thread fakessh @
I removed the dns that does not support dnssec Now it is necessary to wait a day or two Le dimanche 27 mars 2011 à 20:58 +0200, Torinthiel a écrit : > On 03/27/11 20:45, fakessh @ wrote: > > That would be the key with id 47103 in your case. The one that has SEP > > flag, the one that only signs D

Re: problem for validate the script dnssec to isc dlv

2011-03-27 Thread Torinthiel
On 03/27/11 20:45, fakessh @ wrote: > That would be the key with id 47103 in your case. The one that has SEP > flag, the one that only signs DNSKEY records and not others. > Regards, > Torinthiel > http://www.mail-archive.com/bind-users@lists.isc.org/msg09107.html > > This is your word > > i rerea

Re: problem for validate the script dnssec to isc dlv

2011-03-27 Thread fakessh @
That would be the key with id 47103 in your case. The one that has SEP flag, the one that only signs DNSKEY records and not others. Regards, Torinthiel http://www.mail-archive.com/bind-users@lists.isc.org/msg09107.html This is your word i reread the thread to fevrier http://www.mail-archive.com/

Re: problem for validate the script dnssec to isc dlv

2011-03-27 Thread Torinthiel
On 03/27/11 19:09, fakessh @ wrote: > in insurance I googled > no result > > how to do this ... The procedure is everywhere around the ISC site. See eg. http://www.isc.org/solutions/dlv https://dlv.isc.org/about/using my mail on 3rd jan, 21:00 in reply to yours (thread inconsistency dnssec deb

Re: problem for validate the script dnssec to isc dlv

2011-03-27 Thread fakessh @
in insurance I googled no result how to do this ... nb : i reajust my blog immediately Le lundi 28 mars 2011 à 03:43 +1100, Mark Andrews a écrit : > In message <1301241108.12273.192.camel@localhost.localdomain>, "fakessh @" > writ > es: > > i use the key > > BEPHMu/5onzrEE7z1egmhg/WPO0+juoZr

Re: problem for validate the script dnssec to isc dlv

2011-03-27 Thread Mark Andrews
In message <1301241108.12273.192.camel@localhost.localdomain>, "fakessh @" writ es: > i use the key > BEPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE > 1+lLy2brhQv5rN32RKtMzX6Mj70jdzeND4XknW58dnJNPCxn8+ > jAGl2FZLK8t+1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73 > Te9fZ2kJb56dhgMde5ymX4BI/oQ+cAK50/xvJ

Re: problem for validate the script dnssec to isc dlv

2011-03-27 Thread fakessh @
i use the key BEPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE 1+lLy2brhQv5rN32RKtMzX6Mj70jdzeND4XknW58dnJNPCxn8+ jAGl2FZLK8t+1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73 Te9fZ2kJb56dhgMde5ymX4BI/oQ+cAK50/xvJv00Frf8kw6ucM TwFlgPe+jnGxPPEmHAte/URkY62ZfkLoBAADLHQ9IrS2tryAe7 mbBZVcOwIeU/Rw/mRx/vwwMCTgNboM

Re: problem for validate the script dnssec to isc dlv

2011-03-26 Thread Mark Andrews
Mark Andrews writes: > > In message <1301008426.12273.115.camel@localhost.localdomain>, "fakessh @" wr > ites: > > it is 6 months since I used no worries dlv > > What keys do you have recorded with dlv.isc.org? > Do they match what you currently have in the zone? You did not answer these questi

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
Le vendredi 25 mars 2011 à 09:24 +1100, Mark Andrews a écrit : > In message <1301004136.12273.106.camel@localhost.localdomain>, "fakessh @" > writes: > > Le vendredi 25 mars 2011 =C3=A0 08:24 +1100, Mark Andrews a =C3=A9crit : > > > In message <1300993213.12273.96.camel@localhost.localdomain>, "f

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
http://secspider.cs.ucla.edu/fakessh-eu--dnskey.txt this page indicate a DSA algorhtyme it's my old algorthyme new is RSA Le vendredi 25 mars 2011 à 01:25 +0100, fakessh @ a écrit : > I did click Click ManageZones > Click on (details) > Click under More (more) > performance test > > > > the t

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
I did click Click ManageZones Click on (details) Click under More (more) performance test the total result is http://pastebin.com/1bAYHj0d i mail hostmaster of ns1.novacrea.fr is a friend Le vendredi 25 mars 2011 à 10:38 +1100, Mark Andrews a écrit : > In message <1301008426.12273.115.camel

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Mark Andrews
In message <1301008426.12273.115.camel@localhost.localdomain>, "fakessh @" writes: > it is 6 months since I used no worries dlv What keys do you have recorded with dlv.isc.org? Do they match what you currently have in the zone? Click on ManageZones Click on (details) Under More click on (detail

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Eivind Olsen
Fakessh wrote: > the DS it is necessary that I contact OVH. > in the DLV conserne my problem I have this same recurring errors in the > script of the isc > that's my problem I'll admit, I've had some problems guessing what the problem you're experiencing really is, there's been mentions of TSIG k

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
it is 6 months since I used no worries dlv Le jeudi 24 mars 2011 à 23:21 +0100, fakessh @ a écrit : > everything worked just fine until I change the key rdnc. ns in my side > and only ns1.novacrea.fr ns1.xname.org are valid for dnssec > > > Le jeudi 24 mars 2011 à 23:02 +0100, fakessh @ a écrit

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
the DS it is necessary that I contact OVH. in the DLV conserne my problem I have this same recurring errors in the script of the isc that's my problem Le vendredi 25 mars 2011 à 09:24 +1100, Mark Andrews a écrit : > In message <1301004136.12273.106.camel@localhost.localdomain>, "fakessh @" > wr

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
everything worked just fine until I change the key rdnc. ns in my side and only ns1.novacrea.fr ns1.xname.org are valid for dnssec Le jeudi 24 mars 2011 à 23:02 +0100, fakessh @ a écrit : > Le vendredi 25 mars 2011 à 08:24 +1100, Mark Andrews a écrit : > > In message <1300993213.12273.96.camel@lo

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Evan Hunt
> necessarily because I can not validate the key through via isc dlv Your zone isn't fully DNSSEC-capable yet; fix that first, then you can submit a DLV record into dlv.isc.org. ns0.xname.org and ns2.xname.org are giving bad answers; remove them from your NS RRset and things should start working

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Mark Andrews
In message <1301004136.12273.106.camel@localhost.localdomain>, "fakessh @" writes: > Le vendredi 25 mars 2011 =C3=A0 08:24 +1100, Mark Andrews a =C3=A9crit : > > In message <1300993213.12273.96.camel@localhost.localdomain>, "fakessh @"= > write > > s: > > > hi bind //guru/ > > > hi isc guru > >

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
Le vendredi 25 mars 2011 à 08:24 +1100, Mark Andrews a écrit : > In message <1300993213.12273.96.camel@localhost.localdomain>, "fakessh @" > write > s: > > hi bind //guru/ > > hi isc guru > > hi mark andrews > > hi michel graff > > There are no DLV records for fakessh.eu. See below. > > There

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Mark Andrews
In message <1300993213.12273.96.camel@localhost.localdomain>, "fakessh @" write s: > hi bind //guru/ > hi isc guru > hi mark andrews > hi michel graff There are no DLV records for fakessh.eu. See below. There are no DS records for fakessh.eu. See below. Two of the nameservers for your zone a

problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
hi bind //guru/ hi isc guru hi mark andrews hi michel graff despite my efforts to validate isc dlv. I'm always at the same point I can not validate the keys. error below the script isc SUCCESS 94.23.59.30 answered DNSKEY query with rcode NOERROR 3.345:SUCCESS 87.98.186.232 answered DNSKEY query