Re: [CentOS] Centos7 poblems with dnssec-keygen

2015-12-24 Thread Robert Moskowitz
On 12/24/2015 04:30 PM, Alice Wonder wrote: On 12/24/2015 12:54 PM, Robert Moskowitz wrote: Right now all I want working is rndc. dnssec will be worked on come spring. With all I do in security, it bothers me that the Centos documentation specifies MD5. Should be at least SHA1, if not S

Re: [CentOS] Centos7 poblems with dnssec-keygen

2015-12-24 Thread Alice Wonder
On 12/24/2015 12:54 PM, Robert Moskowitz wrote: Right now all I want working is rndc. dnssec will be worked on come spring. With all I do in security, it bothers me that the Centos documentation specifies MD5. Should be at least SHA1, if not SHA256. Oh okay I apoligize, I mis-read your

Re: [CentOS] Centos7 poblems with dnssec-keygen

2015-12-24 Thread Robert Moskowitz
On 12/24/2015 03:50 PM, Alice Wonder wrote: On 12/24/2015 12:40 PM, Robert Moskowitz wrote: I am reading: https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-bind-rndc.html I have bind installed and default config running. I have not applied my customizations yet. The first s

Re: [CentOS] Centos7 poblems with dnssec-keygen

2015-12-24 Thread Alice Wonder
On 12/24/2015 12:40 PM, Robert Moskowitz wrote: I am reading: https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-bind-rndc.html I have bind installed and default config running. I have not applied my customizations yet. The first step I am taking is getting rndc.key created. So r

[CentOS] Centos7 poblems with dnssec-keygen

2015-12-24 Thread Robert Moskowitz
I am reading: https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-bind-rndc.html I have bind installed and default config running. I have not applied my customizations yet. The first step I am taking is getting rndc.key created. So reading the guide I am trying to run (while logged