<div class="gmail_extra">Thanks for your help, I noticed a small regex which modified my configuration file thus causing errors.<br><br><div class="gmail_quote">On 22 April 2012 17:03, Mark Elkins <span dir="ltr"><<a href="mailto:mje@posix.co.za" target="_blank">mje@posix.co.za</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On Sun, 2012-04-22 at 16:31 +0100, Damian Myerscough wrote:<br>
> Thanks a lot, I have now resolved this issue. However, I was following<br>
> the DNSSEC in 6 minutes guide [1]<br>
> for learning purposes and I have followed all the steps up to "you are<br>
> now serving DNSSEC signed zones".<br>
<br>
</div>Reading the presentation - which dates itself....<br>
<br>
Slide 16, rather use<br>
dnsseckeygen -a RSASHA256 -b 1024 -n ZONE zonename (for ZSK)<br>
<br>
Slide - 18: Also use RSASHA256 for the KSK. I personally use just 2048<br>
bits for the KSK.<br>
<br>
This avoids you having to do an algorithm rollover - which is a royal<br>
pain in the proverbial. Its also what the 'root' uses.<br>
('dig @<a href="http://i.root-servers.net" target="_blank">i.root-servers.net</a>. . dnskey' gives:<br>
'DNSKEY 257 3 8' - and - 'DNSKEY 256 3 8')<br>
The '8' part is algo RSASHA256, you probably have a '5' there.<br>
<div class="HOEnZb"><div class="h5"><br>
<br>
<br>
<br>
<br>
--<br>
. . ___. .__ Posix Systems - (South) Africa<br>
/| /| / /__ <a href="mailto:mje@posix.co.za">mje@posix.co.za</a> - Mark J Elkins, Cisco CCIE<br>
/ |/ |ARK \_/ /__ LKINS Tel: <a href="tel:%2B27%2012%20807%200590" value="+27128070590">+27 12 807 0590</a> Cell: <a href="tel:%2B27%2082%20601%200496" value="+27826010496">+27 82 601 0496</a><br>
<br>
</div></div><br>_______________________________________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Regards,<br>Damian Myerscough<br>
</div>