dnssec - DS vs dnssec-signkey

[Michael Richardson]

-----BEGIN PGP SIGNED MESSAGE-----


bind 9.3 snapshot no longer compiles the dnssec-signkey/makekeyset files.
I take that this is because we don't need them anymore, due to DS.

It seems that dnssec-signzone magically finds the right key to reference
in the DS. I'm guessing that this is due to presence of the keyset- files?

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr at sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBPcb90YqHRg3pndX9AQF2AQP+LZ6l6FXrfypbGcc9o1nwgvn42QSiVEoM
DXLW1hsSbwJvfdoK9yq6MGiz8WrD8x9Im9LEcxU8Xw8agMxY24nWv8R1wZGvkrsy
TQbFbP9E3ZDTZ8Cd0OxJMANCoSCSOZpQMZBLf8b59mrmnp/6jH3sbhN5IgJZlFwz
c+5InjZ+IAE=
=Ghxi
-----END PGP SIGNATURE-----