Re: Updating a DNSSEC config to use a different algorithm

2021-02-02 Thread @lbutlr
On 02 Feb 2021, at 07:36, Matthijs Mekking wrote: > If the PDF is not working for you, perhaps https://bind9.readthedocs.io/ > suits you better? The PDF works fine, and I can search for "dnssec" and "policy" but it is using some emdash or similar character for the - in between which makes

Re: Updating a DNSSEC config to use a different algorithm

2021-02-02 Thread Matthijs Mekking
On 02-02-2021 14:40, @lbutlr wrote: On 02 Feb 2021, at 02:23, Matthijs Mekking wrote: 1. Create a dnssec-policy that matches your current keys (so in your case algorithm 7, also make sure you use the same length). So I guess something like: dnssec-policy alg13-ksk-unlimited-zsk-60day

Re: Updating a DNSSEC config to use a different algorithm

2021-02-02 Thread @lbutlr
On 02 Feb 2021, at 02:23, Matthijs Mekking wrote: > 1. Create a dnssec-policy that matches your current keys (so in your case > algorithm 7, also make sure you use the same length). > > So I guess something like: > >dnssec-policy alg13-ksk-unlimited-zsk-60day { >keys { >

bind9 DNS not responding to queries on LAN

2021-02-02 Thread JochenWolf
Hi, I am new to Bind 9, and am trying to figure out how to set it up correctly, however I cannot get the Bind 9 to respond to queries from other machines. I have written up the problem in detail here: https://stackoverflow.com/questions/66007365/bind9-dns-not-responding-to-queries-on-lan Any

Re: Updating a DNSSEC config to use a different algorithm

2021-02-02 Thread Matthijs Mekking
On 01-02-2021 17:34, @lbutlr wrote: On 01 Feb 2021, at 07:14, Matthijs Mekking wrote: Depends on what your DNSSEC configuration is. Are you using dnssec-signzone/named? auto-dnssec maintain? inline-signing? dnssec-policy? dnssec-keymgr? These are all good questions, and when I set this up