From owner-freebsd-stable Fri Sep 28 7:31:18 2001 Delivered-To: freebsd-stable@freebsd.org Received: from onceler.kciLink.com (onceler.kcilink.com [216.194.193.106]) by hub.freebsd.org (Postfix) with ESMTP id A0CEF37B405 for ; Fri, 28 Sep 2001 07:31:13 -0700 (PDT) Received: (from khera@localhost) by onceler.kciLink.com (8.11.6/8.11.6) id f8SEV5K99185; Fri, 28 Sep 2001 10:31:05 -0400 (EDT) (envelope-from khera) From: Vivek Khera MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <15284.35240.906360.637739@onceler.kciLink.com> Date: Fri, 28 Sep 2001 10:31:04 -0400 To: Mark.Andrews@isc.org Cc: stable@freebsd.org, bind-users@isc.org Subject: Re: BIND 8.2.4-REL in FreeBSD 4.4 broke my DNSSEC In-Reply-To: <200109280805.f8S85Rr03084@drugs.dv.isc.org> References: <15282.16519.937665.189852@onceler.kciLink.com> <200109280805.f8S85Rr03084@drugs.dv.isc.org> X-Mailer: VM 6.96 under 21.1 (patch 14) "Cuyahoga Valley" XEmacs Lucid Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG >>>>> "MA" == Mark Andrews writes: >> My config is like this: >> >> key kci-yertle. { >> algorithm hmac-md5; MA> secret "my-secret-is-here"; >> }; >> >> server 216.194.193.105 { >> keys { kci-yertle.; }; >> }; MA> Are you sure that you have these clauses in this order and not MA> the reverse order. Keys have to be defined before they used. Yes; it used to work with 8.2.3-REL as I stated. It turns out to be a bug in 8.2.4-REL that dislikes key names that end with a period. Changing the key name not to end with a period allows it to work. A bug report has been filed. Thanks for your reply. -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Vivek Khera, Ph.D. Khera Communications, Inc. Internet: khera@kciLink.com Rockville, MD +1-240-453-8497 AIM: vivekkhera Y!: vivek_khera http://www.khera.org/~vivek/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message