Re: Problem with DNSSEC signing zone

2012-07-20 Thread Carsten Strotmann
Hello Thierry SAMEN, On Fri, 20 Jul 2012, William Thierry SAMEN wrote: Hi all Bind users, i just have a problem with my zone signing output i made all the steps to obtain a good result. 1.  Generated KSK and ZSK 2. Add both of keys at the end of my zone file 3. signing my zone with

RE: Problem with DNSSEC signing zone

2012-07-20 Thread Spain, Dr. Jeffry A.
1. Generated KSK and ZSK 2.Add both of keys at the end of my zone file 3.signing my zone with dnssec-signzone command 4.enable dnssec in named options 5.change the name of my zone in the named by namezone.signed 6.I got the root DNSKEY RR set before with dig command

Re: Problem with DNSSEC signing zone

2012-07-20 Thread Casey Deccio
On Fri, Jul 20, 2012 at 2:52 AM, William Thierry SAMEN thierry.sa...@gmail.com wrote: i just have a problem with my zone signing output i made all the steps to obtain a good result. ... my zone name is *willzik.co.uk* ** I'm getting an NXDOMAIN response from the co.uk servers, rather than

RE: Problem with DNSSEC signing zone

2012-07-20 Thread Spain, Dr. Jeffry A.
all this step has been well done, but the last step: Generate DS records and provide them to your registrar. has not been fluent for me. I found how can i provide key to the registrar i used this command: dnssec-dsfromkey -2 Kwillzik.co.uk KSK.key  is it the good way to do? That command

Re: Problem with DNSSEC signing zone

2012-07-20 Thread Doug Barton
On 07/20/2012 07:05, Casey Deccio wrote: On Fri, Jul 20, 2012 at 2:52 AM, William Thierry SAMEN thierry.sa...@gmail.com mailto:thierry.sa...@gmail.com wrote: i just have a problem with my zone signing output i made all the steps to obtain a good result. ... my zone name is