<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
code
{mso-style-priority:99;
font-family:"Courier New";}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
p.xmsonormal, li.xmsonormal, div.xmsonormal
{mso-style-name:x_msonormal;
margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle28
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-GB link=blue vlink=purple style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span lang=PT style='mso-fareast-language:EN-US'>Hi.<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>Thanks for the reply. Very useful information!<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>Kind regards<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>David Carvalho<o:p></o:p></span></p><div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div><p class=MsoNormal><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US>From:</span></b><span lang=EN-US> Jiaming Zhang <J.Zhang@yiximeta.com> <br><b>Sent:</b> 24 March 2023 12:33<br><b>To:</b> David Carvalho <david@di.ubi.pt>; 'Petr Menšík' <pemensik@redhat.com>; bind-users@lists.isc.org<br><b>Subject:</b> Re: dnssec-keygen not available in Bind9.16-utils package?<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><div><div><div><div><p class=MsoNormal>Hello David,<o:p></o:p></p></div><div><p class=MsoNormal>I have Oracle Linux 8 instance running bind 9.11.x as well bind 9.16.x and confirm that there’s no <code><span style='font-size:10.0pt'>dnssec-*</span></code> utilities in the <code><span style='font-size:10.0pt'>bind9.16-utils</span></code>. Although the 9.11 and 9.16 version cannot coexist, you can insead installing the <code><span style='font-size:10.0pt'>bind9.16-utils</span></code> install <code><span style='font-size:10.0pt'>bind-utils</span></code>. It works still perfect on the instance I ran <code><span style='font-size:10.0pt'>bind9.16</span></code>. Currently on this instance I have both version of <code><span style='font-size:10.0pt'>bind-libs</span></code> and version 9.11.x of <code><span style='font-size:10.0pt'>bind-utils</span></code> working together with <code><span style='font-size:10.0pt'>bind9.16</span></code>.<o:p></o:p></p></div></div></div><div id=ms-outlook-mobile-signature><div><p class=MsoNormal><o:p> </o:p></p></div><div><div><p class=MsoNormal>Regards, <o:p></o:p></p></div><div><p class=MsoNormal>Jiaming Zhang<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><b>Yixi Meta</b><o:p></o:p></p></div><div><p class=MsoNormal><b><span style='font-size:10.5pt'>Email: <a href="mailto:J.Zhang@yiximeta.com">J.Zhang@yiximeta.com</a></span></b><span style='font-size:10.5pt'><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span style='font-size:10.5pt'>Website: yiximeta.com</span></b><span style='font-size:10.5pt'><o:p></o:p></span></p></div></div></div></div></div><div class=MsoNormal align=center style='text-align:center'><hr size=2 width="98%" align=center></div><div id=divRplyFwdMsg><p class=MsoNormal><b><span style='color:black'>Van:</span></b><span style='color:black'> bind-users <<a href="mailto:bind-users-bounces@lists.isc.org">bind-users-bounces@lists.isc.org</a>> namens David Carvalho via bind-users <<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>><br><b>Verzonden:</b> Friday, March 24, 2023 10:22:45 AM<br><b>Aan:</b> 'Petr Menšík' <<a href="mailto:pemensik@redhat.com">pemensik@redhat.com</a>>; <a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a> <<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>><br><b>Onderwerp:</b> RE: dnssec-keygen not available in Bind9.16-utils package?</span> <o:p></o:p></p><div><p class=MsoNormal> <o:p></o:p></p></div></div><div><div><p class=xmsonormal>Thank you so much for your help.<o:p></o:p></p><p class=xmsonormal>Unfortunately it seems bind-utils 9.11 and 9.16 can not co-exist (at least in Oracle Linux 8). I had problems with dependencies and didn’t force anything until having more information.<o:p></o:p></p><p class=xmsonormal>Thanks once again!<o:p></o:p></p><p class=xmsonormal>Regards<o:p></o:p></p><p class=xmsonormal>David Carvalho<o:p></o:p></p><p class=xmsonormal> <o:p></o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=xmsonormal><b><span lang=EN-US>From:</span></b><span lang=EN-US> bind-users <<a href="mailto:bind-users-bounces@lists.isc.org">bind-users-bounces@lists.isc.org</a>> <b>On Behalf Of </b>Petr Menšík<br><b>Sent:</b> 24 March 2023 01:09<br><b>To:</b> <a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br><b>Subject:</b> Re: dnssec-keygen not available in Bind9.16-utils package?</span><o:p></o:p></p></div></div><p class=xmsonormal> <o:p></o:p></p><p>Oh, correction. Those were published, but in wrong repository. If you enable CodeReady Builder (CRB) repository, you should be able to install it even with current version. Not sure what is official name on Oracle Linux, use "dnf repolist --all" command to find the name. They are called powertools on CentOS Stream 8.<o:p></o:p></p><p>On RHEL 8 enable it by command:<o:p></o:p></p><pre><code>subscription-manager repos --enable codeready-builder-for-rhel-8-x86_64-rpms</code><o:p></o:p></pre><div><p class=xmsonormal>On 3/24/23 01:43, Petr Menšík wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p>dnssec utilities are in bind9.16-dnssec-utils, which by mistake stayed internal only package. We have built them, but not published them. It would be moved into public repository once RHEL 8.8.0 is released, tracked under bug #2115322 [1]. It should be already available in CentOS Stream 8.<o:p></o:p></p><p>I am sorry for the inconvenience, this issue were missed during our testing. It should be possible to install bind-utils from bind 9.11 together with bind9.16 server until that is fixed. Unless you depend on more recent features in bind9.16-utils, it might help in the mean time.<o:p></o:p></p><p>Regards,<br>Petr<o:p></o:p></p><p>1. <a href="https://bugzilla.redhat.com/show_bug.cgi?id=2115322">https://bugzilla.redhat.com/show_bug.cgi?id=2115322</a><o:p></o:p></p><div><p class=xmsonormal>On 3/20/23 13:31, David Carvalho via bind-users wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=xmsonormal>Hello, good morning.<o:p></o:p></p><p class=xmsonormal>I’m trying to setup DNNSEC and I’ve been using Bind9.16 packages available in Oracle Linux 8. Somehow there are also “Bind” packages, which default to 9.11 version. Being a new installation I went for 9.16. The problem now is that dnssec-keygen seems to be only available in version 9.11, and if I try to install I get problems with dependencies .<o:p></o:p></p><p class=xmsonormal>Does anyone have some experience with this?<o:p></o:p></p><p class=xmsonormal> <o:p></o:p></p><p class=xmsonormal>Kind regards<o:p></o:p></p><p class=xmsonormal>David<o:p></o:p></p></blockquote><pre>-- <o:p></o:p></pre><pre>Petr Menšík<o:p></o:p></pre><pre>Software Engineer, RHEL<o:p></o:p></pre><pre>Red Hat, <a href="https://www.redhat.com/">https://www.redhat.com/</a><o:p></o:p></pre><pre>PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB<o:p></o:p></pre></blockquote><pre>-- <o:p></o:p></pre><pre>Petr Menšík<o:p></o:p></pre><pre>Software Engineer, RHEL<o:p></o:p></pre><pre>Red Hat, <a href="https://www.redhat.com/">https://www.redhat.com/</a><o:p></o:p></pre><pre>PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB<o:p></o:p></pre></div></div></div></body></html>