Package: bind9 Version: 1:9.7.3.dfsg-1~squeeze8 Severity: normal Hi,
After signing a zone with opendnssec and NSEC3 algorithms 5 or 7 (aliases), BIND refuses to load that zone complaining the algorithm is unknown for NSEC3: warning: zone myzone.mydomain.org/IN: unsupported nsec3 hash algorithm: 7 error: zone myzone.mydomain.org/IN: no supported nsec3 hash algorithm error: zone myzone.mydomain.org/IN: not loaded due to errors. The same happens for algorithm 5. Regards, Antonio -- System Information: Debian Release: 6.0.6 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-xen-amd64 (SMP w/1 CPU core) Locale: LANG=es_ES@euro, LC_CTYPE=es_ES@euro (charmap=ISO-8859-15) Shell: /bin/sh linked to /bin/dash Versions of packages bind9 depends on: ii adduser 3.112+nmu2 add and remove users and groups ii bind9utils 1:9.7.3.dfsg-1~squeeze8 Utilities for BIND ii debconf [debconf 1.5.36.1 Debian configuration management sy ii libbind9-60 1:9.7.3.dfsg-1~squeeze8 BIND9 Shared Library used by BIND ii libc6 2.11.3-4 Embedded GNU C Library: Shared lib ii libcap2 1:2.19-3 support for getting/setting POSIX. ii libdb4.8 4.8.30-2 Berkeley v4.8 Database Libraries [ ii libdns69 1:9.7.3.dfsg-1~squeeze8 DNS Shared Library used by BIND ii libgssapi-krb5-2 1.10.1+dfsg-2 MIT Kerberos runtime libraries - k ii libisc62 1:9.7.3.dfsg-1~squeeze8 ISC Shared Library used by BIND ii libisccc60 1:9.7.3.dfsg-1~squeeze8 Command Channel Library used by BI ii libisccfg62 1:9.7.3.dfsg-1~squeeze8 Config File Handling Library used ii libldap-2.4-2 2.4.23-7.2 OpenLDAP libraries ii liblwres60 1:9.7.3.dfsg-1~squeeze8 Lightweight Resolver Library used ii libssl0.9.8 0.9.8o-4squeeze13 SSL shared libraries ii libxml2 2.7.8.dfsg-2+squeeze5 GNOME XML library ii lsb-base 3.2-23.2squeeze1 Linux Standard Base 3.2 init scrip ii net-tools 1.60-23 The NET-3 networking toolkit ii netbase 4.45 Basic TCP/IP networking system bind9 recommends no packages. Versions of packages bind9 suggests: pn bind9-doc <none> (no description available) ii dnsutils 1:9.7.3.dfsg-1~squeeze8 Clients provided with BIND pn resolvconf <none> (no description available) pn ufw <none> (no description available) -- Configuration Files: /etc/bind/named.conf.local changed [not included] /etc/bind/named.conf.options changed [not included] -- debconf information: bind9/different-configuration-file: bind9/run-resolvconf: true bind9/start-as-user: bind
