Re: rpmbuild problem with 9.11.22 on Centos
Dear Carl, Thanks very much: you were spot on correct! Installing epel-rpm-marcos got the compiles working on both Centos 7 & 6. Best wishes, Matthew -- >From: Carl Byington >To: Matthew Richardson , bind-users@lists.isc.org >Cc: >Date: Sat, 29 Aug 2020 13:53:48 -0700 >Subject: Re: rpmbuild problem with 9.11.22 on Centos >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA512 > >On Sat, 2020-08-29 at 19:06 +0100, Matthew Richardson wrote: >> My guess (which may be wrong) is that something is wrong with the >> line:- >> %set_build_flags >> in bind.spec. > >It looks like isc is depending on some rpm macros from epel > >yum install epel-rpm-macros > > >-BEGIN PGP SIGNATURE- > >iHMEAREKADMWIQSuFMepaSkjWnTxQ5QvqPuaKVMWwQUCX0rARxUcY2FybEBmaXZl >LXRlbi1zZy5jb20ACgkQL6j7milTFsG3fACaA5uiRIRN5AU9Gpql+s4wcUqP9h0A >n0Gv0z5a0GzUaV3/VEz9REtAOCSo >=TQ+p >-END PGP SIGNATURE- > ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
dnssec-keygen getting dates wrong
Running BIND.. 9.16.6 on a Gentoo machine - so BIND is kept very much up to date. dnssec-keygen - Version: 9.16.6 I create DNSSEC Keys in a manual process and in order to see when a Key was created (so I can rotate them - etc..) I look at the Creation date inside the 'key' file # dnssec-keygen -a RSASHA256 fubar.com # cat Kfubar.com.+008+21010.key ; This is a zone-signing key, keyid 21010, for fubar.com. ; Created: 20200830105653 (Sun Aug 30 12:56:53 202) ; Publish: 20200830105653 (Sun Aug 30 12:56:53 202) ; Activate: 20200830105653 (Sun Aug 30 12:56:53 202) Can anyone spot an issue? Look carefully at the creation date, the year in particular! -- Mark James ELKINS - Posix Systems - (South) Africa m...@posix.co.za Tel: +27.826010496 For fast, reliable, low cost Internet in ZA: https://ftth.posix.co.za Posix SystemsVCARD for MJ Elkins ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: dnssec-keygen getting dates wrong
Le dimanche 30 août 2020 à 12:58 +0200, Mark Elkins a écrit : > Running BIND.. 9.16.6 on a Gentoo machine - so BIND is kept very much > up to date. > dnssec-keygen - Version: 9.16.6 > > I create DNSSEC Keys in a manual process and in order to see when a > Key was created (so I can rotate them - etc..) I look at the Creation > date inside the 'key' file > # dnssec-keygen -a RSASHA256 fubar.com > # cat Kfubar.com.+008+21010.key > ; This is a zone-signing key, keyid 21010, for fubar.com. > ; Created: 20200830105653 (Sun Aug 30 12:56:53 202) > ; Publish: 20200830105653 (Sun Aug 30 12:56:53 202) > ; Activate: 20200830105653 (Sun Aug 30 12:56:53 202) > > Can anyone spot an issue? Look carefully at the creation date, the > year in particular! Hi it looks like a pretty printing issue. # dnssec-settime -p all Kfubar.com.+008+21010.key should give you the correct timestamp. -- Marcel de Riedmatten ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: dnssec-keygen getting dates wrong
This is fixed in 5486. [func] Add 'rndc dnssec -checkds' command to tell named that the DS record has been published in the parent. [GL #1613] Which is in the next maintenance release. Mark > On 31 Aug 2020, at 05:03, Marcel de Riedmatten wrote: > > Le dimanche 30 août 2020 à 12:58 +0200, Mark Elkins a écrit : >> Running BIND.. 9.16.6 on a Gentoo machine - so BIND is kept very much >> up to date. >> dnssec-keygen - Version: 9.16.6 >> >> I create DNSSEC Keys in a manual process and in order to see when a >> Key was created (so I can rotate them - etc..) I look at the Creation >> date inside the 'key' file >> # dnssec-keygen -a RSASHA256 fubar.com >> # cat Kfubar.com.+008+21010.key >> ; This is a zone-signing key, keyid 21010, for fubar.com. >> ; Created: 20200830105653 (Sun Aug 30 12:56:53 202) >> ; Publish: 20200830105653 (Sun Aug 30 12:56:53 202) >> ; Activate: 20200830105653 (Sun Aug 30 12:56:53 202) >> >> Can anyone spot an issue? Look carefully at the creation date, the >> year in particular! > > > Hi > > it looks like a pretty printing issue. > > # dnssec-settime -p all Kfubar.com.+008+21010.key > > should give you the correct timestamp. > > -- > Marcel de Riedmatten > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users