You don’t put DS into child zone, the DS record goes to parent zone,
so your question doesn’t make sense in this context.

Ondrej
--
Ondřej Surý (He/Him)
ond...@isc.org

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

> On 16. 5. 2022, at 16:01, frank picabia <fpica...@gmail.com> wrote:
> 
> Let's put it another way:
> 
> Using tools like host or dig, can I look up my DS without it talking to the 
> domain registrar?
> 
> If it is always getting from the domain registrar, I can't see how to check 
> the DS is set up all right purely within bind.
> 
> 
> On Mon, May 16, 2022 at 10:16 AM Anand Buddhdev <ana...@ripe.net> wrote:
> On 16/05/2022 15:07, frank picabia wrote:
> 
> Hi Frank,
> 
> > I have dsset-example.com showing two DS keys with algorithm 8.
> > I included both .key files in my DNS.  Only digest 1 comes back
> > in a dig query.
> >
> > I use dnssec-signzone tool to sign the zone file.
> >
> > The domain registrar says there is a problem with the digest 2 value.
> > It's copied directly from the dsset file.
> >
> > Not sure about the chicken and the egg in this case.  When I do a dig, is
> > it really
> > just getting the value back from the domain registrar?
> >
> > Any suggestions on how to ensure my digest 2 DS value is set up right?
> 
> We cannot help you if we cannot see the DS records or know which domain
> they are for.
> 
> Anand
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

Attachment: signature.asc
Description: Message signed with OpenPGP

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to