Re: Updating a DNSSEC config to use a different algorithm

2021-02-01 Thread Mal via bind-users
On 02/02/2021 12:10 am, @lbutlr wrote: > I've been using alg-7 for DNS, but that is no longer recommended. How > difficult is it to change the signing algorithm and what is the process (Bind > 9.16.11)? I migrated recently from Alg8 to Alg13, no drama..  My registry does not have a user

Re: Options for named startup docker

2021-02-01 Thread Felipe Agnelli Barbosa
Hi, I think it is better to build your own image. So then, in the build(bind.dockerfile) you can pass the arguments, like: RUN: ENTRYPOINT: etc. OR(maybe), you can put explicitly in the conf file(named.conf): listen-on { none; }; listen-on-v6 { any; }; []s Felipe Em seg., 1 de fev. de 2021

Re: Updating a DNSSEC config to use a different algorithm

2021-02-01 Thread @lbutlr
On 01 Feb 2021, at 07:14, Matthijs Mekking wrote: > Depends on what your DNSSEC configuration is. Are you using > dnssec-signzone/named? auto-dnssec maintain? inline-signing? dnssec-policy? > dnssec-keymgr? These are all good questions, and when I set this up I could have answered with some

Options for named startup docker

2021-02-01 Thread Christian Link
Hello everyone, I am using the BIND Docker image in a Docker Compose setup. In this setup I would like to disable ipv4 and start the named daemon with the option "-4". Normally you can do this via the file /etc/default/named (In the options variable). Unfortunately, this file is ignored. I also

Re: Updating a DNSSEC config to use a different algorithm

2021-02-01 Thread Matthijs Mekking
Hi, Depends on what your DNSSEC configuration is. Are you using dnssec-signzone/named? auto-dnssec maintain? inline-signing? dnssec-policy? dnssec-keymgr? Yes there are a lot of ways to maintain DNSSEC in BIND. The recommended way forward is to use dnssec-policy. Migrating to it may still

Updating a DNSSEC config to use a different algorithm

2021-02-01 Thread @lbutlr
I've been using alg-7 for DNS, but that is no longer recommended. How difficult is it to change the signing algorithm and what is the process (Bind 9.16.11)? -- "He raised his hammer defiantly and opened his mouth to say, "Oh, yeah?" but stopped, because just by his ear he heard a