Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 28 Sep 2001 10:31:04 -0400
From:      Vivek Khera <khera@kcilink.com>
To:        Mark.Andrews@isc.org
Cc:        stable@freebsd.org, bind-users@isc.org
Subject:   Re: BIND 8.2.4-REL in FreeBSD 4.4 broke my DNSSEC 
Message-ID:  <15284.35240.906360.637739@onceler.kciLink.com>
In-Reply-To: <200109280805.f8S85Rr03084@drugs.dv.isc.org>
References:  <15282.16519.937665.189852@onceler.kciLink.com> <200109280805.f8S85Rr03084@drugs.dv.isc.org>

next in thread | previous in thread | raw e-mail | index | archive | help
>>>>> "MA" == Mark Andrews <Mark.Andrews@isc.org> writes:

>> My config is like this:
>> 
>> key kci-yertle. {
>> algorithm hmac-md5;
MA>         secret "my-secret-is-here";
>> };
>> 
>> server 216.194.193.105 {
>> keys { kci-yertle.; };
>> };

MA> 	Are you sure that you have these clauses in this order and not
MA> 	the reverse order.  Keys have to be defined before they used.


Yes; it used to work with 8.2.3-REL as I stated.

It turns out to be a bug in 8.2.4-REL that dislikes key names that end
with a period.  Changing the key name not to end with a period allows
it to work.  A bug report has been filed.

Thanks for your reply.

-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Vivek Khera, Ph.D.                Khera Communications, Inc.
Internet: khera@kciLink.com       Rockville, MD       +1-240-453-8497
AIM: vivekkhera Y!: vivek_khera   http://www.khera.org/~vivek/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?15284.35240.906360.637739>