Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Since version 9.9, Bind supports inline signing, but I don't find any information on how to make it working with NSEC3. I cannot add NSEC3PARAM RR with nsupdate : I think it's normal because of inline signing, but I cannot parameter this for inline signing.

Has someone setup and tested it, or an idea ?

Thanks for answers.

share|improve this question

1 Answer 1

up vote 2 down vote accepted

Finally I found the answer on bind-user mailing list.

Instead of use nsupdate, I should use the next command :

rndc signing -nsec3param 1 1 100 1234567890 <zonename>

Hope this question will help someone in the future.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.