On Sat, 11 Jun 2011 22:11:57 +1200, Craig Whitmore wrote: [...] > And testing if everything worked out.. Except it sets the options > differently that if I typed "pdnssec set-nsec3 spam.co.nz" I have no idea > what the difference is but it still passes the dig tests I do...
I have to say that I am a bit confused now. The difference is that the opt-out flag is set to zero on the slave, but that's what http://tools.ietf.org/html/rfc5155#section-4.1.2 says. So I don't understand how a zone transfer is supposed to work when the flag is always set to zero in the NSEC3PARAM record... Christof -- http://cmeerw.org sip:cmeerw at cmeerw.org mailto:cmeerw at cmeerw.org xmpp:cmeerw at cmeerw.org _______________________________________________ Pdns-users mailing list [email protected] http://mailman.powerdns.com/mailman/listinfo/pdns-users
