Re: Transitioning to new algorithm for DNSSEC

2022-05-05 Thread Mark Andrews
> On 6 May 2022, at 04:53, frank picabia wrote: > > > > On Thu, May 5, 2022 at 3:48 PM Tony Finch wrote: > frank picabia wrote: > > On Thu, May 5, 2022 at 1:46 PM wrote: > > > > > > Tony wrote a nice article about that: > > > https://www.dns.cam.ac.uk/news/2020-01-15-rollover.html > > >

Re: Transitioning to new algorithm for DNSSEC

2022-05-05 Thread frank picabia
On Thu, May 5, 2022 at 3:48 PM Tony Finch wrote: > frank picabia wrote: > > On Thu, May 5, 2022 at 1:46 PM wrote: > > > > > > Tony wrote a nice article about that: > > > https://www.dns.cam.ac.uk/news/2020-01-15-rollover.html > > > > Thanks for that. My problem is these notes have little in

Re: Transitioning to new algorithm for DNSSEC

2022-05-05 Thread Tony Finch
frank picabia wrote: > On Thu, May 5, 2022 at 1:46 PM wrote: > > > > Tony wrote a nice article about that: > > https://www.dns.cam.ac.uk/news/2020-01-15-rollover.html > > Thanks for that. My problem is these notes have little in common with how > the digital ocean guide > ran it ( >

Re: Transitioning to new algorithm for DNSSEC

2022-05-05 Thread frank picabia
On Thu, May 5, 2022 at 1:46 PM wrote: > Hi, > > On 5/5/22 6:37 PM, frank picabia wrote: > > > > Hi, > > > > I've been running a Bind set up with DNSSEC for many years. > > It was done following the guide at the digitalocean site. > > > > What I don't find in a nice guide, is how to change your

Re: Transitioning to new algorithm for DNSSEC

2022-05-05 Thread Jan-Piet Mens via bind-users
Is there a guide on transitioning the DNSSEC signing algorithm, One of the best concise instructions on doing this was written by Tony Finch while at Cambridge, and I have used this [1] successfully a few times. My recommendation: print it out, and use a red pen to tick off the individual

Re: Transitioning to new algorithm for DNSSEC

2022-05-05 Thread nicolas
Hi, On 5/5/22 6:37 PM, frank picabia wrote: Hi, I've been running a Bind set up with DNSSEC for many years. It was done following the guide at the digitalocean site. What I don't find in a nice guide, is how to change your algorithm to a more current one, and seamlessly make your domain run

Re: Transitioning to new algorithm for DNSSEC

2022-05-05 Thread Petr Špaček
On 05. 05. 22 18:37, frank picabia wrote: Hi, I've been running a Bind set up with DNSSEC for many years. It was done following the guide at the digitalocean site. What I don't find in a nice guide, is how to change your algorithm to a more current one, and seamlessly make your domain run

Transitioning to new algorithm for DNSSEC

2022-05-05 Thread frank picabia
Hi, I've been running a Bind set up with DNSSEC for many years. It was done following the guide at the digitalocean site. What I don't find in a nice guide, is how to change your algorithm to a more current one, and seamlessly make your domain run under this new chain of data. I tried it on my