Re: How do I get from IANA's root-anchors.xml to managed-keys{}?

2010-07-17 Thread Stephane Bortzmeyer
On Fri, Jul 16, 2010 at 01:57:05PM +, ALAIN AINA aal...@trstech.net wrote a message of 20 lines which said: https://itar.iana.org/instructions/ It does not work, it was only for ITAR and the published Trust Anchor uses a different format: % ./anchors2keys -v root-anchors.xml No DNSKEYs

Re: How do I get from IANA's root-anchors.xml to managed-keys{}?

2010-07-17 Thread Kalman Feher
My earlier post described altering the format and included the file that anchors2keys would work with. Kal Feher On 17/07/2010, at 23:46, Stephane Bortzmeyer bortzme...@nic.fr wrote: On Fri, Jul 16, 2010 at 01:57:05PM +, ALAIN AINA aal...@trstech.net wrote a message of 20 lines

Re: How do I get from IANA's root-anchors.xml to managed-keys{}?

2010-07-16 Thread Kazunori Fujiwara
From: Hauke Lampe la...@hauke-lampe.de http://data.iana.org/root-anchors/root-anchors.xml http://data.iana.org/root-anchors/root-anchors.asc The XML file contains a DS hash of the root KSK, but BIND needs a public key in the managed-keys clause. Are there any tools to retrieve the

Re: How do I get from IANA's root-anchors.xml to managed-keys{}?

2010-07-16 Thread Stephane Bortzmeyer
On Fri, Jul 16, 2010 at 06:16:13PM +0900, Kazunori Fujiwara fujiw...@wide.ad.jp wrote a message of 25 lines which said: You can check root DNSKEY RR and root-anchors.xml using dig and dnssec-dsfromkey. Good idea and here is a Makefile and a XSLT script which automates the whole thing. Bug

Re: How do I get from IANA's root-anchors.xml to managed-keys{}?

2010-07-16 Thread Kalman Feher
As a once off I did the following last night. (yes I know the DNSKEY would have been fine too). anchors2keys worked fine so long as the format was correct so... I just cut and pasted the content of : https://data.iana.org/root-anchors/root-anchors.xml Zone to delegation, algorithm, digest type

Re: How do I get from IANA's root-anchors.xml to managed-keys{}?

2010-07-16 Thread ALAIN AINA
On Jul 16, 2010, at 1:43 PM, Stephane Bortzmeyer wrote: On Fri, Jul 16, 2010 at 03:00:11PM +0200, Kalman Feher kalman.fe...@melbourneit.com.au wrote a message of 85 lines which said: anchors2keys worked fine so long as the format was correct so... I didn't know this tool. Where can we