[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]


To: Olaf Kolkman <OKolkman@ripe.net>
Cc: Edward Lewis <lewis@tislabs.com>, Miek Gieben <miekg@nlnetlabs.nl>, dnssec@cafax.se
From: Edward Lewis <lewis@tislabs.com>
Date: Thu, 3 May 2001 12:25:08 -0400
Delivery-Date: Fri May 4 08:43:07 2001
In-Reply-To: <200105031605.SAA10567@kantoor.ripe.net>
Sender: owner-dnssec@cafax.se
Subject: Re: bind9

I think I don't understand the problem then...

I do see different SIGs from the two keys, but I don't know why - what role
is the 193 name server playing?

At 12:05 PM -0400 5/3/01, Olaf Kolkman wrote:
> Edward Lewis <lewis@tislabs.com> writes:
> * I don't know, but I thought you would want to have the child signed keys in
> * with the parent.  That's the crux of the parent-held-child-sig, isn't it?
>
>Ed,
>
>Not as I interpret it. The childs key with the parent sig is in the
>parent's apex.
>That is the only requirement to make things work...
>
>Miek,
>
>I've tried exactly the same and it works for me.. (I think :-) )...
>For now I have used cut-n-paste to include the child key not
>$INCLUDE... maybe that is why it works for me.  Then again I might
>misinterpret the problem.
>
>
> * >i want to do the following:
> * >
> * >- i have a public keys of child zones
> * >- i include those keys in the .nl.nl zone
> * >- i sign the .nl.nl zone
> * >


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis                                                NAI Labs
Phone: +1 443-259-2352                      Email: lewis@tislabs.com

You fly too often when ... the airport taxi is on speed-dial.

Opinions expressed are property of my evil twin, not my employer.



Home | Date list | Subject list