BIND software integration with HSM

2020-07-16 Thread Smile TV
Dear all, I am implementing DNSSEC using BIND 9.11 with integrated HSM Utimaco equipment. I configured to use Native PKCS # 11 and connected to the HSM device to create KSK, ZSK keys. But when I ran the program, the error "initializing DST: PKCS # 11 initialization failed" resulted in the service

Error "Query section mismatch : got"

2020-08-19 Thread Smile TV
Hi all! I query the PTR Resource Record that is hosted on DNS Server/ 115.84.177.8 (reverse zone: 250.0-24.199.212.125.in-addr.arpa). However, There is a difference between when querying directly the PTR RR and querying Any RR. The results of two case below: *Case 1: Query the PTR RR direc

Re: Error "Query section mismatch : got"

2020-08-20 Thread Smile TV
As for Viettel, I don't know how they configure it. But when I use a server on another network, the result is as follows: ; <<>> DiG 9.6-ESV-R8 <<>> @115.84.177.8 250.0-24.199.212.125.in-addr.arpa ptr ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status:

Re: Error "Query section mismatch : got"

2020-08-20 Thread Smile TV
> my question is why would anyone do this, as this apparently does not make > sense. Because when I was from a server that was querying the reverse record 250.199.212.125.in-addr.arpa it gave an error with the "SERVFAIL" error code so I tried to query directly to the hosting that managed it to de