Re: [Opendnssec-user] Guidance on Chained Zone Validation

2016-10-11 Thread Erwin Lansing
> On 11 Oct 2016, at 19.01, Mark Elkins wrote: > > (Someone here must have done this) > > I've got the zones.. > > ZA >/ | \ > org co web(.za) > > All sign just fine. My own checking tool plus tools like dnssec-verify > and validns pass the individual zones just fine. My copy of t

[Opendnssec-user] Guidance on Chained Zone Validation

2016-10-11 Thread Mark Elkins
(Someone here must have done this) I've got the zones.. ZA / | \ org co web(.za) All sign just fine. My own checking tool plus tools like dnssec-verify and validns pass the individual zones just fine. My copy of the ZA zone also contains the DS records of my children. I'd like to