9.9.0b2 Key Expiration Question

Hopefully this is a duh moment that I'm having. I am testing out what happens when you have set the ZSK inactive and delete times and then try to sign the zone via a rndc reload zonename command (using static zone file with inline signing). We have 3 keys as listed below: KSK - 63406 ZSK -

Bind 9.9.0b2 inline signing...

I have opened up a Bug ticket with ISC on this - #26676, but I just wanted to make sure that I'm not doing anything wrong that may be causing the issue. Has anyone been able to get inline-signing to work on a static master zone using an authoritative server? When we manually change the Master

RE: Bind 9.9.0b2 inline signing...

Kevin McConville University at Albany -Original Message- From: Jan-Piet Mens [mailto:jpm...@gmail.com] On Behalf Of Jan-Piet Mens Sent: Tuesday, November 22, 2011 1:02 PM To: McConville, Kevin Cc: bind-users@lists.isc.org Subject: Re: Bind 9.9.0b2 inline signing... 22-Nov-2011 11:25:28.320

Bind 9.9.0B1 Inline-Signing Question

First off, Thank you to all who responded/helped in my previous post - this list is a wonderful community. The inline-signing is now working...sort of. We edit the static zone, adding a resource record (of any type), increment the serial, and then do a rndc reload. However, Bind is still

RE: Bind 9.9.0B1 Inline-Signing Question

[mailto:e...@isc.org] Sent: Thursday, November 17, 2011 12:27 PM To: McConville, Kevin Cc: bind-users@lists.isc.org Subject: Re: Bind 9.9.0B1 Inline-Signing Question We edit the static zone, adding a resource record (of any type), increment the serial, and then do a rndc reload. However, Bind

RE: Bind 9.9.0B1 Inline-Signing Question

as keeping everyone up to date on the issue. Thanks, -Kevin Kevin McConville University at Albany -Original Message- From: Evan Hunt [mailto:e...@isc.org] Sent: Thursday, November 17, 2011 2:15 PM To: McConville, Kevin Cc: bind-users@lists.isc.org Subject: Re: Bind 9.9.0B1 Inline

OT: Bind 9.9.0B1 Inline-Signing Question

I know that this isn't the forum for betas, which is why I put off-topic on the subject line. We are trying to implement DNSSEC for our static zones. While the dynamic signing has been automated, static inline-signing isn't available until Bind 9.9 We have been testing with the alphas and now

DNSSEC Signing Key Questions

I'm new to this list, so please bear with me if these are/seem like newbie questions. We are currently evaluating a DNSSEC implementation. We have several static zones that we would like to implement first. We are currently using ISC Bind 9.7.4 - In the test environment (1) Authoritative dns