<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">Thanks,</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">now that I know what to look for, I
found the docs for it.<br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">Maybe worth mentioning that <i><span
style="white-space: pre-wrap">cds-digest-types</span></i> is not
available in 9.18.x, as it has been introduced in 9.19.11.</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix"> Danilo</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">On 16. 10. 24 23:24, Mark Andrews
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:5210A1C4-12C6-4704-8F99-633D49FE9D10@isc.org">
<pre wrap="" class="moz-quote-pre">
</pre>
<blockquote type="cite">
<pre wrap="" class="moz-quote-pre">On 16 Oct 2024, at 23:00, Danilo Godec via bind-users <a class="moz-txt-link-rfc2396E" href="mailto:bind-users@lists.isc.org"><bind-users@lists.isc.org></a> wrote:
Hi,
I've been doing some more reading into DNSSEC and if I understand correctly, it is allowed to have multiple DS records for one KSK - with different digest types. Apparently, SHA-1 is deprecated and shouldn't be used anymore, while SHA-256 is mandatory and has to exist.
That leaves SHA-384, which is optional and I can generate manually with 'dnssec-dsfromkey'. Since I have to ask my registrar to add DS records to parent zones (.eu in this case), I can just send them both records, right?
Is it also possible to have dnssec-policy to generate both digest types as CDS records?
</pre>
</blockquote>
<pre wrap="" class="moz-quote-pre">
cds-digest-types { "sha-256"; "sha-384"; };
</pre>
<blockquote type="cite">
<pre wrap="" class="moz-quote-pre"> Regards,
Danilo
--
Visit <a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list
ISC funds the development of this software with paid support subscriptions. Contact us at <a class="moz-txt-link-freetext" href="https://www.isc.org/contact/">https://www.isc.org/contact/</a> for more information.
bind-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a>
</pre>
</blockquote>
<pre wrap="" class="moz-quote-pre">
</pre>
</blockquote>
<p><br>
</p>
<div class="moz-signature">
<div><br>
Lep pozdrav / Best regards,<br>
--<br>
<table cellpadding="0" cellspacing="0" border="0"
style="background: none; border-width: 0px; border: 0px; margin: 0; padding: 0;">
<tbody>
<tr>
<td valign="top"
style="vertical-align: top; color: #666666; font-size: 12px; font-family: Arial, Helvetica, sans-serif;">
<span style="font-weight: bold;">Danilo Godec</span> |
Sistemska podpora / System Administration </td>
</tr>
<tr>
<td valign="top"
style="vertical-align: top; color: #666666; font-size: 12px; font-family: Arial, Helvetica, sans-serif;">
<span style="font-weight: bold; color: #ed1c24">AGENDA
d.o.o.</span> | Ul. Pohorskega bataljona 49, Sl-2000
Maribor </td>
</tr>
<tr>
<td valign="top"
style="vertical-align: top; color: #666666; font-size: 12px; font-family: Arial, Helvetica, sans-serif;">
<span style="font-weight: bold; color: #ed1c24">E:</span>
<a href="mailto:danilo.godec@agenda.si"
class="moz-txt-link-freetext"> danilo.godec@agenda.si
</a> | <span style="font-weight: bold; color: #ed1c24">T:</span>
+386 (0)2 421 61 31 </td>
</tr>
<tr>
<td valign="top"
style="vertical-align: top; color: #666666; font-size: 12px; font-family: Arial, Helvetica, sans-serif; padding-top: 12px;">
<a href="https://www.agenda.si/"> Agenda OpenSystems </a>
| Največji slovenski odprtokodni integrator </td>
</tr>
<tr>
<td valign="top"
style="vertical-align: top; color: #666666; font-size: 12px; font-family: Arial, Helvetica, sans-serif;">
<a href="http://www.redhat.si/"> Red Hat v Sloveniji </a>
| Red Hat Premier Business Partner </td>
</tr>
<tr>
<td valign="top"
style="vertical-align: top; color: #666666; font-size: 12px; font-family: Arial, Helvetica, sans-serif;">
<a href="http://elasticbox.eu/"> ElasticBox </a> |
Poslovne rešitve v oblaku </td>
</tr>
<tr>
<td valign="top"
style="vertical-align: top; color: #666666; font-size: 12px; font-family: Arial, Helvetica, sans-serif; padding-top: 22px; padding-bottom: 22px;">
<a style="border: 0" href="https://www.agenda.si/"> <img
alt="Agenda d.o.o." style="border: 0"
src="cid:part1.4DiFib10.0V5VSrAu@agenda.si"> </a> </td>
</tr>
<tr>
<td valign="top"
style="vertical-align: top; color: #666666; font-size: 12px; font-family: Arial, Helvetica, sans-serif;">
<a href="https://www.agenda.si/index.php?id=228"> Izjava
o omejitvi odgovornosti / Legal disclaimer statement </a>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</body>
</html>