[Bug 782614] Re: make configuring DNSSEC validation easier
The attachment 0001-Add-a-named.conf.keys-file-for-storing-various- keys.patch seems to be a patch. If it isn't, please remove the patch flag from the attachment, remove the patch tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team. [This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.] ** Tags added: patch -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
** Patch added: 0004-dnssec-in-options.patch https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+attachment/2257805/+files/0004-dnssec-in-options.patch -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
DNSSEC will place an additional burden on the network and, in particular, the infrastructure based DNS servers. The rationale to have the root key defined here but not used is that will use some of the existing DNS infrastructure (via use of RFC5011) and allow server operators to gauge load. I would recommend that Ubuntu 11.10 ships with DNSSEC available (i.e. root key but disabled) and Ubuntu 12.04 ships with DNSSEC enabled (i.e. root key and enabled by default), so that server operators are not overwhelmed. ** Patch added: 0005-Add-in-the-current-root-.-DNSSEC-key.patch https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+attachment/2257836/+files/0005-Add-in-the-current-root-.-DNSSEC-key.patch -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
Note, I just checked Fedora 15 and the root key is setup similarly and is *enabled* by default as well. So you might just want to do so within Ubuntu as well. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
** Patch added: 0001-Add-a-named.conf.keys-file-for-storing-various-keys.patch https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+attachment/2256290/+files/0001-Add-a-named.conf.keys-file-for-storing-various-keys.patch -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
** Patch added: 0002-Install-the-named.conf.keys-file.patch https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+attachment/2256307/+files/0002-Install-the-named.conf.keys-file.patch -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
** Patch added: 0003-Include-the-named.conf.keys-file.patch https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+attachment/2256349/+files/0003-Include-the-named.conf.keys-file.patch -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
** Changed in: bind9 (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
** Changed in: bind9 (Ubuntu) Status: Incomplete = New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
Thanks for the bug report, which version is this with? Regards chuck ** Changed in: bind9 (Ubuntu) Importance: Undecided = Low ** Changed in: bind9 (Ubuntu) Status: New = Incomplete -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
All versions of BIND that Ubuntu has ever published could do with improvements in making DNSSEC easier. However, as noted in the linked instructions, the specific suggestions apply to Bind 9.7+ Which, according to http://packages.ubuntu.com/search?keywords=bind9 is Ubuntu 10.04 (Lucid) and later. Thanks, Anand -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
