Re: How to resign a signed zone

2010-05-27 Thread Phil Mayers
On 05/27/2010 06:43 AM, rams wrote: Hi, How do we resign the signed zone? What is the command to do the RESIGNING ? Resign with a new ZSK, or resign with the existing ZSK to a avoid signature expiry? Which version of bind are you running? What's the zone statement look like?

Re: How to resign a signed zone

2010-05-27 Thread Alan Clegg
On 5/27/2010 1:43 AM, rams wrote: How do we resign the signed zone? What is the command to do the RESIGNING ? Run dnssec-signzone on the signed zone file. I recommend that you: mv example.com.signed example.com vi example.com dnssec-signzone example.com rndc reload example.com Note

Re: How to resign a signed zone

2010-05-27 Thread Alan Clegg
On 5/27/2010 6:36 AM, Alan Clegg wrote: On 5/27/2010 1:43 AM, rams wrote: How do we resign the signed zone? What is the command to do the RESIGNING ? Run dnssec-signzone on the signed zone file. I recommend that you: But, of course my PRIMARY recommendation would be to make the zone

Re: synchronization between maste and slave no working

2010-05-27 Thread Yunfeng Xu
I didn't increment the serial number on the master. After fix it, sync is OK. Thanks all of you! $TTL 86400 ; 1 day pateo.com.cnIN SOA dnssrv1.pateo.com.cn. root.pateo.com.cn. ( 100224013 ; serial 3600 ;