Re: [Opendnssec-user] SOA record issues - opendnssec-1.4.3

2014-03-25 Thread PASZTOR Miklos
Hi, On 14-03-21 16:12, Peter Hunčár wrote: I tried every possible format of the unsigned zone file, the last was: $ORIGIN example.com. $TTL2D ; time to live @IN SOAns.example.com. hostmaster.example.com. ( 20140321013H 15 1W 3H ) Bind allows time

[Opendnssec-user] Re: SOA record issues - opendnssec-1.4.3

2014-03-25 Thread Stephane Bortzmeyer
On Sat, Mar 22, 2014 at 09:40:55AM +0100, PASZTOR Miklos pasz...@nic.hu wrote a message of 56 lines which said: Bind allows time values in SOA records like '1W' and '3H' however I'm afraid ods does not. Try: s/1W/604800/ s/3H/10800/. By the way, the zone file format is standard (RFC 1035,

Re: [Opendnssec-user] Re: SOA record issues - opendnssec-1.4.3

2014-03-25 Thread Matthijs Mekking
On 03/25/2014 09:35 AM, Stephane Bortzmeyer wrote: On Sat, Mar 22, 2014 at 09:40:55AM +0100, PASZTOR Miklos pasz...@nic.hu wrote a message of 56 lines which said: Bind allows time values in SOA records like '1W' and '3H' however I'm afraid ods does not. Try: s/1W/604800/ s/3H/10800/.

[Opendnssec-user] OpenDNSSEC Signer TroubleS

2014-03-25 Thread Ramanou Biaou
Hello! I have some problems with my opendnssec, Signed files are not in the directory I specified in zonelist.xml ZoneList Zone name=mydomaine.com Policytest/Policy SignerConfiguration/var/lib/opendnssec/signconf/mydomaine.com.xml/SignerConfiguration

[Opendnssec-user] Transition time in the past.

2014-03-25 Thread Fred.Zwarts.
We are running ODS 1.4.3 for some weeks now. We have some zones for which we use policies with shared keys. It has been running well. I have seen a few zones that performed a ZSK roll-over at the wschedules times. But now I discovered a zone for which the active ZSK has a transition time a few

Re: [Opendnssec-user] Transition time in the past.

2014-03-25 Thread Siôn Lloyd
On 25/03/14 13:06, Fred.Zwarts. wrote: We are running ODS 1.4.3 for some weeks now. We have some zones for which we use policies with shared keys. It has been running well. I have seen a few zones that performed a ZSK roll-over at the wschedules times. But now I discovered a zone for which the

[Opendnssec-user] Re: Transition time in the past.

2014-03-25 Thread Fred.Zwarts.
Hi Sion, Thanks for the fast reaction. ods-ksmutil key list --verbose shows the following for the zone: erdg.usor.nlKSK dsready When required (keypub) 20488 67f63f125f0bdecc4d944d63acbc02b6 SoftHSM 29011 erdg.usor.nlKSK

[Opendnssec-user] Re: OpenDNSSEC Signer TroubleS

2014-03-25 Thread Ramanou Biaou
I could solve the problem I missed ods-auditor Just do apt-get install-opendnssec-auditor Ramanou Le 25/03/2014 13:30, Ramanou Biaou a écrit : Hello! I have some problems with my opendnssec, Signed files are not in the directory I specified in zonelist.xml ZoneList Zone

Re: [Opendnssec-user] Re: SOA record issues - opendnssec-1.4.3

2014-03-25 Thread Mathieu Arnold
+--On 25 mars 2014 09:35:31 +0100 Stephane Bortzmeyer bortzme...@nic.fr wrote: | On Sat, Mar 22, 2014 at 09:40:55AM +0100, | PASZTOR Miklos pasz...@nic.hu wrote | a message of 56 lines which said: | | Bind allows time values in SOA records like '1W' and '3H' however I'm | afraid ods does