[Opendnssec-develop] Testing for RC3, found a new zone to test with
rickard.bellgrim at iis.se
Thu Jan 21 12:44:40 CET 2010
-----BEGIN PGP SIGNED MESSAGE-----
> It looks like the trailing dots are already in the unsigned zone file,
> so from a ldns perspective that looks good.
> I tested it on my machine, and I did not get these errors.
Perhaps a problem related to my version of ruby (1.8.6) and dnsruby (1.42).
> I did get signature verification failure for the DNSKEY. It seems that
> if there is a DNSKEY with a different TTL than //Keys/TTL, it is
> a different RRset. A fix is committed soon.
Do all of the DNSKEYs need to be in the same RRset? So the DNSKEY in the unsigned zone gets manipulated to have the same TTL as the ones created by OpenDNSSEC?
-----BEGIN PGP SIGNATURE-----
Version: 9.8.3 (Build 4028)
-----END PGP SIGNATURE-----
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Opendnssec-develop