No local script. I am using snssec-signzone that cam with the installation:
# dnssec-signzone --help Version: 9.6.2-P1-RedHat-9.6.2-3.P1 On Thu, May 20, 2010 at 12:26 PM, Stephane Bortzmeyer <[email protected]>wrote: > On Thu, May 20, 2010 at 12:10:53PM -0700, > itservices88 <[email protected]> wrote > a message of 92 lines which said: > > > # dnssec-signzone -N INCREMENT mydomain.org > > Verifying the zone using the following algorithms: RSASHA1. > > Missing RSASHA1 signature for . NSEC > > The zone is not fully signed for the following algorithms: RSASHA1. > > dnssec-signzone: fatal: DNSSEC completeness test failed. > > I do not find these error messages in BIND source code. Are you sure > you use the pristine dnssec-signzone and not, say, a local custom > script? > > (dnssec-signzone is supposed to sign the zone, not to check that it is > signed.) >
_______________________________________________ bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
