Re: [Sks-devel] key.ip6.li status

[Christian Felsing]

it is included:

        dnssec-enable yes;
        dnssec-lookaside auto;
        dnssec-validation yes;
        dnssec-lookaside "." trust-anchor "dlv.isc.org";

and of course the dlv.isc.org key:

trusted-keys {
        dlv.isc.org. 257 3 5
"BEAAAAPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE1+lLy2
brhQv5rN32RKtMzX6Mj70jdzeND4XknW58dnJNPCxn8+jAGl2FZLK8t+
1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73Te9fZ2kJb56dhgMde5
ymX4BI/oQ+cAK50/xvJv00Frf8kw6ucMTwFlgPe+jnGxPPEmHAte/URk
Y62ZfkLoBAADLHQ9IrS2tryAe7mbBZVcOwIeU/Rw/mRx/vwwMCTgNboM
QKtUdvNXDrYJDSHZws3xiRXF1Rf+al9UmZfSav/4NWLKjHzpT59k/VSt TDN0YUuWrBNh";
};

Christian


Am 23.05.2011 23:14, schrieb Scott Grayban:
> Maybe you don't have the lookaside option set which is still recommended.
> 
> File /etc/bind/named.conf.options
> 
> options {
>         ......
>         dnssec-enable yes;
>         dnssec-validation yes;
>         dnssec-lookaside . trust-anchor dlv.isc.org.;
>         ......
> };