Re: rpmbuild problem with 9.11.22 on Centos

2020-08-30 Thread Matthew Richardson
Dear Carl,

Thanks very much: you were spot on correct!

Installing epel-rpm-marcos got the compiles working on both Centos 7 & 6.

Best wishes,
Matthew
 --
>From: Carl Byington 
>To: Matthew Richardson , bind-users@lists.isc.org
>Cc: 
>Date: Sat, 29 Aug 2020 13:53:48 -0700
>Subject: Re: rpmbuild problem with 9.11.22 on Centos

>-BEGIN PGP SIGNED MESSAGE-
>Hash: SHA512
>
>On Sat, 2020-08-29 at 19:06 +0100, Matthew Richardson wrote:
>> My guess (which may be wrong) is that something is wrong with the
>> line:-
>> %set_build_flags
>> in bind.spec.
>
>It looks like isc is depending on some rpm macros from epel
>
>yum install epel-rpm-macros
>
>
>-BEGIN PGP SIGNATURE-
>
>iHMEAREKADMWIQSuFMepaSkjWnTxQ5QvqPuaKVMWwQUCX0rARxUcY2FybEBmaXZl
>LXRlbi1zZy5jb20ACgkQL6j7milTFsG3fACaA5uiRIRN5AU9Gpql+s4wcUqP9h0A
>n0Gv0z5a0GzUaV3/VEz9REtAOCSo
>=TQ+p
>-END PGP SIGNATURE-
>

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


dnssec-keygen getting dates wrong

2020-08-30 Thread Mark Elkins
Running BIND.. 9.16.6 on a Gentoo machine - so BIND is kept very much up 
to date.


dnssec-keygen - Version: 9.16.6


I create DNSSEC Keys in a manual process and in order to see when a Key 
was created (so I can rotate them - etc..) I look at the Creation date 
inside the 'key' file


# dnssec-keygen -a RSASHA256 fubar.com

# cat Kfubar.com.+008+21010.key
; This is a zone-signing key, keyid 21010, for fubar.com.
; Created: 20200830105653 (Sun Aug 30 12:56:53 202)
; Publish: 20200830105653 (Sun Aug 30 12:56:53 202)
; Activate: 20200830105653 (Sun Aug 30 12:56:53 202)

Can anyone spot an issue? Look carefully at the creation date, the year 
in particular!


--

Mark James ELKINS  -  Posix Systems - (South) Africa
m...@posix.co.za   Tel: +27.826010496 
For fast, reliable, low cost Internet in ZA: https://ftth.posix.co.za

Posix SystemsVCARD for MJ Elkins

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: dnssec-keygen getting dates wrong

2020-08-30 Thread Marcel de Riedmatten
Le dimanche 30 août 2020 à 12:58 +0200, Mark Elkins a écrit :
> Running BIND.. 9.16.6 on a Gentoo machine - so BIND is kept very much
> up to date.
> dnssec-keygen - Version: 9.16.6
> 
> I create DNSSEC Keys in a manual process and in order to see when a
> Key was created (so I can rotate them - etc..) I look at the Creation
> date inside the 'key' file
> # dnssec-keygen -a RSASHA256 fubar.com
> # cat Kfubar.com.+008+21010.key 
> ; This is a zone-signing key, keyid 21010, for fubar.com.
> ; Created: 20200830105653 (Sun Aug 30 12:56:53 202)
> ; Publish: 20200830105653 (Sun Aug 30 12:56:53 202)
> ; Activate: 20200830105653 (Sun Aug 30 12:56:53 202)
> 
> Can anyone spot an issue? Look carefully at the creation date, the
> year in particular!


Hi

it looks like a pretty printing issue.

# dnssec-settime -p all Kfubar.com.+008+21010.key

should give you the correct timestamp.

-- 
Marcel de Riedmatten

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: dnssec-keygen getting dates wrong

2020-08-30 Thread Mark Andrews
This is fixed in

5486.   [func]  Add 'rndc dnssec -checkds' command to tell named
that the DS record has been published in the parent.
[GL #1613]

Which is in the next maintenance release.

Mark

> On 31 Aug 2020, at 05:03, Marcel de Riedmatten  wrote:
> 
> Le dimanche 30 août 2020 à 12:58 +0200, Mark Elkins a écrit :
>> Running BIND.. 9.16.6 on a Gentoo machine - so BIND is kept very much
>> up to date.
>> dnssec-keygen - Version: 9.16.6
>> 
>> I create DNSSEC Keys in a manual process and in order to see when a
>> Key was created (so I can rotate them - etc..) I look at the Creation
>> date inside the 'key' file
>> # dnssec-keygen -a RSASHA256 fubar.com
>> # cat Kfubar.com.+008+21010.key 
>> ; This is a zone-signing key, keyid 21010, for fubar.com.
>> ; Created: 20200830105653 (Sun Aug 30 12:56:53 202)
>> ; Publish: 20200830105653 (Sun Aug 30 12:56:53 202)
>> ; Activate: 20200830105653 (Sun Aug 30 12:56:53 202)
>> 
>> Can anyone spot an issue? Look carefully at the creation date, the
>> year in particular!
> 
> 
> Hi
> 
> it looks like a pretty printing issue.
> 
> # dnssec-settime -p all Kfubar.com.+008+21010.key
> 
> should give you the correct timestamp.
> 
> -- 
> Marcel de Riedmatten
> 
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742  INTERNET: ma...@isc.org

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users