Re: update-policy wildcard grant

2020-04-01 Thread Mark Andrews
> On 2 Apr 2020, at 11:59, Jim Popovitch via bind-users > wrote: > > On Thu, 2020-04-02 at 09:27 +1100, Mark Andrews wrote: >>> On 2 Apr 2020, at 06:53, Jim Popovitch via bind-users < >>> bind-users@lists.isc.org> wrote: >>> >>> Hello! >>> >>> I started on #bind, moved on to the ARM, and

Re: update-policy wildcard grant

2020-04-01 Thread Jim Popovitch via bind-users
On Thu, 2020-04-02 at 09:27 +1100, Mark Andrews wrote: > > On 2 Apr 2020, at 06:53, Jim Popovitch via bind-users < > > bind-users@lists.isc.org> wrote: > > > > Hello! > > > > I started on #bind, moved on to the ARM, and now I am here. > > > > Here is what I want: > > > > update-policy {grant

Re: update-policy wildcard grant

2020-04-01 Thread Mark Andrews
> On 2 Apr 2020, at 06:53, Jim Popovitch via bind-users > wrote: > > Hello! > > I started on #bind, moved on to the ARM, and now I am here. > > Here is what I want: > > update-policy {grant webserver-tsig-key wildcard _acme-challenge.* TXT;}; > > This is what I get: > > ~$

Re: update-policy wildcard grant

2020-04-01 Thread Tony Finch
Jim Popovitch via bind-users wrote: > >update-policy {grant webserver-tsig-key wildcard _acme-challenge.* TXT;}; Sadly in the DNS a wildcard * can only occur as the leftmost label in a name. RFC 4592 has more than you ever wanted to know about DNS wildcards. It's not pretty. Tony. --