<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">You can’t define a policy there. You can tell named to use the policy. Move the definition outside of options. <br><br><div dir="ltr">-- <div>Mark Andrews</div></div><div dir="ltr"><br><blockquote type="cite">On 4 Aug 2023, at 08:26, E R <fasteddieinaustin@gmail.com> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div dir="ltr">My understanding from the ARM is that the dnssec-policy can be in the "options", "view" or "zone". I have mine in "view" and when I try to move into "options" I get a syntax error that I cannot seem to understand what is wrong. I stripped out all other statements and reduced the dnssec-policy to just a handful of items to KISS and I still do not see why why I get the error from named-checkconf. I can move the block from under "options" to the "view" and it just works so I am not sure why named-checkconf thinks there is a missing semicolon? Bind 9.16.23-RH.<br><br># named-checkconf 1.conf<br>1.conf:3: missing ';' before '{'<br>1.conf:3: '}' expected near '{'<br><br># cat 1.conf<br>options {<br> dnssec-policy "mydefault" {<br> keys {<br> csk key-directory lifetime unlimited algorithm ecdsa256;<br> };<br> };<br> };<br><div><p class="MsoNormal"><br></p></div></div>
<span>-- </span><br><span>Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list</span><br><span></span><br><span>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.</span><br><span></span><br><span></span><br><span>bind-users mailing list</span><br><span>bind-users@lists.isc.org</span><br><span>https://lists.isc.org/mailman/listinfo/bind-users</span><br></div></blockquote></body></html>