Re: DNSSEC Generating Zone Key hanging

2012-04-21 Thread Bill Owens
On Sun, Apr 22, 2012 at 01:11:55AM +0100, Damian Myerscough wrote: >Hello, >I was setting up BIND DNSSEC and when I issue the following command the >process never finishes. >dnssec-keygen -a RSASHA1 -b 1024 -n ZONE example.com >I straced the process and noticed the following mes

DNSSEC Generating Zone Key hanging

2012-04-21 Thread Damian Myerscough
Hello, I was setting up BIND DNSSEC and when I issue the following command the process never finishes. dnssec-keygen -a RSASHA1 -b 1024 -n ZONE example.com I straced the process and noticed the following messages write(2, "Generating key pair.", 20Generating key pair.)= 20 gettimeofday({133

Re: Exercising RFC 5011 rollovers

2012-04-21 Thread Chris Thompson
On Mar 8 2012, I wrote: [...] One experiment I have been doing is to see whether a rollover done as described in https://www.iana.org/dnssec/icann-dps.txt (which is only approximately RFC 5011-like) would cause BIND's managed-keys to do the hoped-for thing or not. That isn't complete yet - I wil