To:
Olaf Kolkman <OKolkman@ripe.net>
Cc:
Edward Lewis <lewis@tislabs.com>, Miek Gieben <miekg@nlnetlabs.nl>, dnssec@cafax.se
From:
Edward Lewis <lewis@tislabs.com>
Date:
Thu, 3 May 2001 12:25:08 -0400
Delivery-Date:
Fri May 4 08:43:07 2001
In-Reply-To:
<200105031605.SAA10567@kantoor.ripe.net>
Sender:
owner-dnssec@cafax.se
Subject:
Re: bind9
I think I don't understand the problem then... I do see different SIGs from the two keys, but I don't know why - what role is the 193 name server playing? At 12:05 PM -0400 5/3/01, Olaf Kolkman wrote: > Edward Lewis <lewis@tislabs.com> writes: > * I don't know, but I thought you would want to have the child signed keys in > * with the parent. That's the crux of the parent-held-child-sig, isn't it? > >Ed, > >Not as I interpret it. The childs key with the parent sig is in the >parent's apex. >That is the only requirement to make things work... > >Miek, > >I've tried exactly the same and it works for me.. (I think :-) )... >For now I have used cut-n-paste to include the child key not >$INCLUDE... maybe that is why it works for me. Then again I might >misinterpret the problem. > > > * >i want to do the following: > * > > * >- i have a public keys of child zones > * >- i include those keys in the .nl.nl zone > * >- i sign the .nl.nl zone > * > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Edward Lewis NAI Labs Phone: +1 443-259-2352 Email: lewis@tislabs.com You fly too often when ... the airport taxi is on speed-dial. Opinions expressed are property of my evil twin, not my employer.