<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=GB2312" http-equiv=Content-Type>
<STYLE>
BLOCKQUOTE {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px; MARGIN-LEFT: 2em
}
OL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
UL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
BODY {
LINE-HEIGHT: 1.5; FONT-FAMILY: 宋体; COLOR: #000080; FONT-SIZE: 10.5pt
}
</STYLE>
<META name=GENERATOR content="MSHTML 8.00.6001.18702"></HEAD>
<BODY style="MARGIN: 10px">
<DIV>Hi Matthijs,</DIV>
<DIV> </DIV>
<DIV>You are right, OpenDNSSEC can support converted IDNs, there is something
wrong at other place, I have fixed the zone file, and OpenDNSSEC works
well.</DIV>
<DIV>Thank you all!</DIV>
<DIV> </DIV>
<DIV>Best regards,</DIV>
<DIV>Stuart</DIV>
<DIV>
<DIV><SPAN></SPAN></DIV></DIV>
<DIV
style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0cm; PADDING-LEFT: 0cm; PADDING-RIGHT: 0cm; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<DIV
style="PADDING-BOTTOM: 8px; PADDING-LEFT: 8px; PADDING-RIGHT: 8px; BACKGROUND: #efefef; COLOR: #000000; FONT-SIZE: 12px; PADDING-TOP: 8px">
<DIV><B>发件人：</B> <A href="mailto:matthijs@nlnetlabs.nl">Matthijs
Mekking</A></DIV>
<DIV><B>发送时间：</B> 2012-08-21 17:39</DIV>
<DIV><B>收件人：</B> <A href="mailto:shuoleo@126.com">shuoleo</A></DIV>
<DIV><B>抄送：</B> <A
href="mailto:opendnssec-user@lists.opendnssec.org">opendnssec-user</A></DIV>
<DIV><B>主题：</B> Re: [Opendnssec-user]Signing IDN zone</DIV></DIV></DIV>
<DIV>
<DIV>-----BEGIN PGP SIGNED MESSAGE-----</DIV>
<DIV>Hash: SHA1</DIV>
<DIV> </DIV>
<DIV>Hi Stuart,</DIV>
<DIV> </DIV>
<DIV>OpenDNSSEC does not support IDN natively, but is able to support</DIV>
<DIV>converted IDNs (like xn--...). When I add you line:</DIV>
<DIV> </DIV>
<DIV>xn--300-xy9do48bgs3f.test. in ds 12345 5 1</DIV>
<DIV>4781EC4678D25BBF0524C135442C9377DE09E5D6</DIV>
<DIV> </DIV>
<DIV>into my test zone, OpenDNSSEC will sign it (works for me):</DIV>
<DIV> </DIV>
<DIV>xn--300-xy9do48bgs3f.test. 86400 IN DS 12345 5 1</DIV>
<DIV>4781ec4678d25bbf0524c135442c9377de09e5d6</DIV>
<DIV>xn--300-xy9do48bgs3f.test. 86400 IN RRSIG DS 8 2 86400</DIV>
<DIV>20120828133937 20120821083350 19746 test.</DIV>
<DIV>SwFX8XEIijB+ccsFR5tXmXcDVkBzm2yJblhGJ+ffsUQcopLmkehtQePRLOw/hzlFSObH2+MzEDvwHJTi5B7NIGK+1SKNxc6tO9MdNOA+hwTs/xaIAVqTVizBMT2dsQDHQBAwX0Kp4WjzxudFInZEkUlx8o84ZlMlDWB2Ce1QTq8=</DIV>
<DIV> </DIV>
<DIV>Perhaps something else is going on? Could you provide me the unsigned</DIV>
<DIV>zone that causes this problem?</DIV>
<DIV> </DIV>
<DIV>Best regards,</DIV>
<DIV> Matthijs</DIV>
<DIV> </DIV>
<DIV>On 08/16/2012 02:15 PM, 刘硕 wrote:</DIV>
<DIV>> Hi， Does OpenDNSSEC support IDN ? I got the error bellow when</DIV>
<DIV>> signing a zone with host names containing Chinese characters which</DIV>
<DIV>> have been processed by IDN. Aug 16 20:09:04 CST-BJ-104 ods-signerd:</DIV>
<DIV>> [adapter] error reading RR at line 3076 (Syntax error, could not</DIV>
<DIV>> parse the RR's rdata): xn--300-xy9do48bgs3f.test. in ds 12345 5 1</DIV>
<DIV>> 4781EC4678D25BBF0524C135442C9377DE09E5D6</DIV>
<DIV>> </DIV>
<DIV>> </DIV>
<DIV>> </DIV>
<DIV>> Best regards, Stuart</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>-----BEGIN PGP SIGNATURE-----</DIV>
<DIV>Version: GnuPG v1.4.11 (GNU/Linux)</DIV>
<DIV>Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/</DIV>
<DIV> </DIV>
<DIV>iQEcBAEBAgAGBQJQM1c1AAoJEA8yVCPsQCW5ircIAIcdxNx8DDF2wstpQYhs63ER</DIV>
<DIV>rZ2x3y5p9Te8pd7Mz61el75BUAlZMbhj2qP+xoUDicbiGUYMfrtdArAzAZB0P3iF</DIV>
<DIV>xGnQ9E903vDH7t5RDMn5B+Moa4qnzjRNcED9LnjeNVsiX2iv1fb53VTJAml0NEJn</DIV>
<DIV>sxOPAe6WhDhRGXEz+jG+zrUnQX0uC/EE1tT8sxLx5DZCid8kLxW1QH1biYL1WWV8</DIV>
<DIV>K861QF5dVz6QBqVlz0pWeo2C9ZfuLecP+6Q/KNufXgFEJ+ADoE2nSLmhu0gXJZaI</DIV>
<DIV>5gQLppQ4thIs1Es35hg3eIZGpjogNdQzbmiAQvMpUaNDoZCE/SlMaY3PXjG4808=</DIV>
<DIV>=GTgE</DIV>
<DIV>-----END PGP SIGNATURE-----</DIV></DIV></BODY></HTML>