Re: CDS records created from ZSK records?

2022-01-25 Thread Mark Elkins
Found it my problem. I used to create the CDS records using a binary that has now been withdrawn by ISC (around November/December 2021) and now use... dnssec-dsfromkey -C $key ...except I was running that on all keys - including ZSK's... I have a bash shell script that does the signing.

test - ignore

2022-01-25 Thread Greg Choules
Hello. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-

Re: test - ignore

2022-01-25 Thread Benny Pedersen
On 2022-01-25 17:45, Greg Choules wrote: Hello. Authentication-Results: lists.isc.org; dkim=fail reason="signature verification failed" (1024-bit key; unprotected) header.d=isc.org header.i=@isc.org header.b=q/vOEba5; dkim=fail reason="signature verification failed" (1024-bit key; unprotect

Re: test - ignore

2022-01-25 Thread Eduard via bind-users
Try using a larger key, at least 2048 bits. Check all your DNS entries and make sure everything matches correctly, MX, A, reverse, etc. Check to see if your hostname used in the HELO/ELHO process matches what is in DNS. Regards, Eduard Tieseler Network Operations Director 4050 Truxel Road Su

test -- please ignore

2022-01-25 Thread Dan Mahoney
testing, please ignore ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more info

One more test -- sorry for the noise

2022-01-25 Thread Dan Mahoney
Sorry for the noise, attempting to validate a DKIM issue ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://

Re: test - ignore

2022-01-25 Thread Dan Mahoney
> On Jan 25, 2022, at 8:50 AM, Benny Pedersen wrote: > > On 2022-01-25 17:45, Greg Choules wrote: >> Hello. > > Authentication-Results: lists.isc.org; > dkim=fail reason="signature verification failed" (1024-bit key; > unprotected) header.d=isc.org header.i=@isc.org header.b=q/vOEba5; >

Re: One more test -- sorry for the noise

2022-01-25 Thread Benny Pedersen
On 2022-01-25 20:26, Dan Mahoney wrote: Sorry for the noise, attempting to validate a DKIM issue Authentication-Results: lists.isc.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=isc.org header.i=@isc.org header.b=E7VfrLLS unprotected means opendki