[Opendnssec-user]Signing IDN zone

Matthijs Mekking matthijs at nlnetlabs.nl
Tue Aug 21 09:39:01 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Stuart,

OpenDNSSEC does not support IDN natively, but is able to support
converted IDNs (like xn--...). When I add you line:

xn--300-xy9do48bgs3f.test. in ds 12345 5 1
4781EC4678D25BBF0524C135442C9377DE09E5D6

into my test zone, OpenDNSSEC will sign it (works for me):

xn--300-xy9do48bgs3f.test.      86400   IN      DS      12345 5 1
4781ec4678d25bbf0524c135442c9377de09e5d6
xn--300-xy9do48bgs3f.test.      86400   IN      RRSIG   DS 8 2 86400
20120828133937 20120821083350 19746 test.
SwFX8XEIijB+ccsFR5tXmXcDVkBzm2yJblhGJ+ffsUQcopLmkehtQePRLOw/hzlFSObH2+MzEDvwHJTi5B7NIGK+1SKNxc6tO9MdNOA+hwTs/xaIAVqTVizBMT2dsQDHQBAwX0Kp4WjzxudFInZEkUlx8o84ZlMlDWB2Ce1QTq8=

Perhaps something else is going on? Could you provide me the unsigned
zone that causes this problem?

Best regards,
  Matthijs

On 08/16/2012 02:15 PM, 刘硕 wrote:
> Hi, Does OpenDNSSEC support IDN ? I got the error bellow when
> signing a zone with host names containing Chinese characters which
> have been processed by IDN. Aug 16 20:09:04 CST-BJ-104 ods-signerd:
> [adapter] error reading RR at line 3076 (Syntax error, could not
> parse the RR's rdata): xn--300-xy9do48bgs3f.test. in ds 12345 5 1
> 4781EC4678D25BBF0524C135442C9377DE09E5D6
> 
> 
> 
> Best regards, Stuart


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJQM1c1AAoJEA8yVCPsQCW5ircIAIcdxNx8DDF2wstpQYhs63ER
rZ2x3y5p9Te8pd7Mz61el75BUAlZMbhj2qP+xoUDicbiGUYMfrtdArAzAZB0P3iF
xGnQ9E903vDH7t5RDMn5B+Moa4qnzjRNcED9LnjeNVsiX2iv1fb53VTJAml0NEJn
sxOPAe6WhDhRGXEz+jG+zrUnQX0uC/EE1tT8sxLx5DZCid8kLxW1QH1biYL1WWV8
K861QF5dVz6QBqVlz0pWeo2C9ZfuLecP+6Q/KNufXgFEJ+ADoE2nSLmhu0gXJZaI
5gQLppQ4thIs1Es35hg3eIZGpjogNdQzbmiAQvMpUaNDoZCE/SlMaY3PXjG4808=
=GTgE
-----END PGP SIGNATURE-----



More information about the Opendnssec-user mailing list