On Mon, 24 Jun 2002 Holger.Zuleger@xxxxxxxxx wrote:
> I' am playing around with bind-9.3.0s200020618 and his DS support.
>
> Configuring a DNSSEC caching forwarder requires the setting of the
> "trusted-key"
> for a secure zone.
> Doing this in the config file, I get the following error on startup:
>
> Jun 24 17:27:52 xt6 named[17515]: starting BIND 9.3.0s20020618
> Jun 24 17:27:52 xt6 named[17515]: loading configuration from '/etc/named.conf'
> Jun 24 17:27:52 xt6 named[17515]: listening on IPv4 interface lo, 127.0.0.1#53
> Jun 24 17:27:52 xt6 named[17515]: listening on IPv4 interface eth0,
> 10.128.4.174#53
>
> ==> Jun 24 17:27:52 xt6 named[17515]: /etc/named.conf:51: ignoring trusted key
> for 'example.de.': no crypto support <==
>
> Jun 24 17:27:52 xt6 named[17515]: command channel listening on 127.0.0.1#953
> Jun 24 17:27:52 xt6 named[17515]: zone 0.0.127.in-addr.arpa/IN: loaded serial
> 2000110301
> Jun 24 17:27:52 xt6 named[17515]: running
>
> named-checkconf is very silent at this point.
> [...]
>
> I have compiled bind with
> # configure --with-openssl
> # make
> # make install
>
> It seems that there is a undocumented compiler flag for crypto support or
> something similar.
> It would be nice if anyone can give me a hint about that.
Are you sure configure found openssl? The DS patches didn't change
anything in the crypto or openssl detection code, so if it worked before,
it should still work.
> Another weird behavior is observerd when I try to include a keyfile
> within a trusted-key section.
> named-checkconf reports an error:
> named.conf:50:expected number neer '"'
> It seems that's not possible to include a file containing only the key,
> so it's not possible to do the following in named.conf:
> trusted-keys {
> include "example1.de.trusted-key-file";
> include "example2.de.trusted-key-file";
> include "com.trusted-key-file";
> include "de.trusted-key-file";
> };
>
> In my opinion it would be nice if we have the choice to store the key
> material in separate files.
This sounds like a bug in the parser.
Brian
|
