Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Master slave configuration of DNSSEC

258 views
Skip to first unread message

Sajeev Ramakrishnan

unread,
May 1, 2010, 11:32:50 AM5/1/10
to bind-...@isc.org

Hi all,

 

I have a question regarding configuration of DNSSEC. If I intend to sign a particular zone which has master and a slave, would I have to sign both?

 

If yes , how would I accomplish this? Will I have to sign both the master and the slave zone with the same set of keys (public and private generated for that zone) ?

 

Thanks in advance.

 

Regards,

Kalpesh

Rick Dicaire

unread,
May 1, 2010, 1:10:56 PM5/1/10
to Sajeev Ramakrishnan, bind-...@isc.org
On Sat, May 1, 2010 at 11:32 AM, Sajeev Ramakrishnan
<kalpes...@gmail.com> wrote:
> I have a question regarding configuration of DNSSEC. If I intend to sign a
> particular zone which has master and a slave, would I have to sign both?

No.

Assuming you've correctly setup zone xfers from master to slave, the
actual zone contents the slave posesses is dependent on what the
master gives it. If the master has dnssec data in the zone file, then
this is what the slave will get.

--
aRDy Music and Rick Dicaire present:
http://www.ardynet.com
http://www.ardynet.com:9000/ardymusic.ogg.m3u

0 new messages