Re: [Pdns-users] Format of private keys in PowerDNSSEC (gmysql) doesn't correspond to BIND's

2011-03-03 Thread bert hubert
On Thu, Feb 24, 2011 at 05:44:01PM +0100, Maik Zumstrull wrote: As noted in the comment, I'm not sure whether this small error is on PDNS' part or in ldns, but an example in RFC 5702 suggests BIND's format is correct. As far as I can tell, this private key format has no formal

[Pdns-users] Format of private keys in PowerDNSSEC (gmysql) doesn't correspond to BIND's

2011-02-24 Thread Jan-Piet Mens
Hello, PowerDNSSEC stores private keys in the cryptokey table. The blob contained there appears to be Private-key-format: v1.2, however there is a difference between keys stored by PDNS and those created by BIND's `dnssec-keygen -C' utility. I discovered this upon attempting to read the private

Re: [Pdns-users] Format of private keys in PowerDNSSEC (gmysql) doesn't correspond to BIND's

2011-02-24 Thread Jan-Piet Mens
Hello Maik, The current version of the format is 1.3, but BIND accepts 1 point anything Newer versions of `dnssec-keygen' generate a 1.3 version unless option `-C' is used, in which case a version 1.2 is created: Compatibility mode: generates an old-style key, without any