question about DNSSEC with PKCS11

HSM to .private file with dnssec-keyfromlabel ? 2. when I configure KASP policy, I notice that bind will generate new key(s) each time it need, but there is no new object in softhsm generated. Could bind of this version roll the objects in HSM/softhsm ? Thanks in advanced. Best Regards, SUN

Re: about apply Deckard to test BIND named

Thank Ondřej for the information ! Best Regards,SUN Guonian On Wednesday, February 16, 2022, 04:05:06 PM GMT+8, Ondřej Surý wrote: Hi Sun, this is impressive effort, but it has several known gotchas: 1. The `named` looks for real interfaces to listen too and it     didn’t play well

about apply Deckard to test BIND named

Regards,SUN Guonian P.S.Deckard's homepage on github.com is https://github.com/CZ-NIC/deckard -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact

Re: about build-in server information zones

It's great !In fact, the hostname.bind is more valuable than version.bind for me.Thanks !  SUN Guonian On Friday, September 29, 2017 7:01 PM, Tony Finch <d...@dotat.at> wrote: Sun Guonian via bind-users <bind-users@lists.isc.org> wrote: > I meet a problem, I want to c

about build-in server information zones

Hello, ISC, I meet a problem, I want to conceal the host information from the Internet, but want it bevisible to the special client. I know it could be realize via bind view, but I need createa special CHAOSNET zone for every BIND instance, 200 or more, which include its IP address or its