Re: DNSSEC and NSEC missing ZSK?

2021-02-09 Thread @lbutlr
On 09 Feb 2021, at 16:19, Mal via bind-users wrote: > On 09/02/2021 10:47 pm, @ wrote: >> Well, I have finally ogttenteh test zone to the point where dnssec-verify is >> happy and everything that I can check also seems happy except dnsviz which >> is very very VERY angry and basically says the

Re: DNSSEC and NSEC missing ZSK?

2021-02-09 Thread Mal via bind-users
On 09/02/2021 10:47 pm, @ wrote: > Well, I have finally ogttenteh test zone to the point where dnssec-verify is > happy and everything that I can check also seems happy except dnsviz which is > very very VERY angry and basically says the zone is entirely garabge. I am > hoping this is a

Re: DNSSEC and NSEC missing ZSK?

2021-02-09 Thread
On 08 Feb 2021, at 11:10, @lbutlr wrote: > That recreates the .signed.jnl and not the .signed file. No errors are > reported. Well, I have finally ogttenteh test zone to the point where dnssec-verify is happy and everything that I can check also seems happy except dnsviz which is very very

Re: DNSSEC and NSEC missing ZSK?

2021-02-08 Thread @lbutlr
> On 08 Feb 2021, at 07:24, Matthijs Mekking wrote: > > Hi, > > On 08-02-2021 12:20, @lbutlr wrote: >> I feel I am getting close. I got the digest generated for hover.com and >> updated the DNS on the test zone, but I am getting errors on verify that I >> don't understand. >> #v+ >> #

Re: DNSSEC and NSEC missing ZSK?

2021-02-08 Thread Matthijs Mekking
Hi, On 08-02-2021 12:20, @lbutlr wrote: I feel I am getting close. I got the digest generated for hover.com and updated the DNS on the test zone, but I am getting errors on verify that I don't understand. #v+ # dnssec-verify -I text -o example.com /etc/namedb/working/example.com.signed

DNSSEC and NSEC missing ZSK?

2021-02-08 Thread @lbutlr
I feel I am getting close. I got the digest generated for hover.com and updated the DNS on the test zone, but I am getting errors on verify that I don't understand. #v+ # dnssec-verify -I text -o example.com /etc/namedb/working/example.com.signed Loading zone 'example.com' from file