Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [dnssec]

The tag has no usage guidance.

0
votes
0answers
17 views

How to setup DNSSEC in BIND on CentOS?

I'am searching the most simple way to setup DNSSEC in BIND using CentOS. I found a question but it's not Centos specific but it's 1000% closer to what I'm after than the entire first page on Google ...
0
votes
1answer
24 views

What does a resolver do if DNSSEC is properly configured on a server that isn't reporting to be authoritative

Does DNSSEC require that my NS1 and NS2 stored at the registrar be authoritative, or just that they answer for the domain? Can they be non-authoritative DNS servers answer the query? Does anything ...
0
votes
0answers
40 views

Can't resolve domain with Unbound (DNSSEC problem?)

I'm using a raspberry with pi-hole and unbound (1.6.0) to manage my DNS. Some days ago, I recognized that I have troubles with some domains but I didn't thought about DNS problems on my side. Today I ...
-1
votes
1answer
203 views

shell script if output equal any ip address [closed]

If $IP output equal to any ip address must print 1, else must print 0. #!/bin/sh IP=$(/usr/local/bin/dig ns.ripe.net. a +short) if [ $IP = "[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}" ]; then ...
2
votes
1answer
137 views

dnscrypt-proxy - not getting dnssec results

I have installed dnscrypt-proxy and am using and dnssec enabled provider; however, when testing my configuration, I'm not getting back dnssec information: dig @127.0.0.1 -p 5300 weather.com +dnssec +...
3
votes
1answer
3k views

can't generate key via dnssec-keygen

$ dnssec-keygen -a HMAC-MD5 -b 512 -n HOST {host} above results in blank line and endless waiting $ dnssec-keygen -T DNSKEY -a HMAC-MD5 -b 512 -n HOST {host} the same entropy: $ cat /proc/...
1
vote
0answers
78 views

How do I troubleshoot DDNS forwarding problem?

Running BIND 9.10.3-P4-RedHat-9.10.3-12.P4.fc23 and DHCP Server 4.3.3-P1. DNS Zones report no errors and appear to work (dig, nslookup, nsupdate, dnssec, rpz, etc.). DHCP starts up without complaint, ...
2
votes
1answer
450 views

Is it possible to mix zones with DNSSEC enabled and disabled in BIND?

I have a dozen domains configured in a set of zones in BIND and I need to add a new one with DNSSEC enabled. If I enable DNSSEC: options { dnssec-enable yes; dnssec-validation yes; }; Will ...
3
votes
1answer
103 views

DNSSEC: how are DS records supposed to be transferred and end up in parent zone?

My notes say that the hash is supposed to securely sent and stored in parent zone so what do I do after: dnssec-keygen -a RSASHA256 -b 1024 -n ZONE mydomain.net dnssec-keygen -a RSASHA256 -b 2048 -n ...
3
votes
2answers
556 views

How to locally validate DNSSEC?

I want to simulate the process of chain of trust validation locally , I do the following :- 1) signed my zone. 2) unbound installed , but i can not configure it for DNSSEC validation could you help ...
3
votes
1answer
2k views

What does the Bind bindkeys-file directive do?

Just trying to understand the bindkeys-file directive related to the DNSSEC extension in the Bind configuration. Is that a public key? Does it sign the response in the same way as digital signatures?