[Userland-team] [OpenIndiana Distribution - Feature #1233] Bind 9.8 with RFC 5011 DNSSEC root key already defined

[illumos project]

Issue #1233 has been updated by r a.


Last night I built Bind 9.9.2 on io_151a7 using the following commands

$ CC=gcc --prefix=/opt/gnu --sysconfdir=/etc --enable-threads --enable-largefile --enable-ipv6 --enable-shared --disable-static
$ make
# make install

After moving named, dig and nslookup sideways, I then linked the named, dig and nslookup to binaries in the /opt/gnu/sbin and /opt/gnu/bin directories

Nov 15 19:45:03 ts named[11872]: [ID 873579 daemon.notice] starting BIND 9.9.2
Nov 15 19:45:03 ts named[11872]: [ID 873579 daemon.notice] built with '--prefix=/opt/gnu' '--sysconfdir=/etc' '--enable-threads' '--enable-largefile' '--enable-ipv6' '--enable-shared' '--disable-static' 'CC=gcc'
Nov 15 19:45:03 ts named[11872]: [ID 873579 daemon.notice] ----------------------------------------------------
Nov 15 19:45:03 ts named[11872]: [ID 873579 daemon.notice] BIND 9 is maintained by Internet Systems Consortium,
Nov 15 19:45:03 ts named[11872]: [ID 873579 daemon.notice] Inc. (ISC), a non-profit 501(c)(3) public-benefit 
Nov 15 19:45:03 ts named[11872]: [ID 873579 daemon.notice] corporation.  Support and training for BIND 9 are 
Nov 15 19:45:03 ts named[11872]: [ID 873579 daemon.notice] available at https://www.isc.org/support
Nov 15 19:45:03 ts named[11872]: [ID 873579 daemon.notice] ----------------------------------------------------


----------------------------------------
Feature #1233: Bind 9.8 with RFC 5011 DNSSEC root key already defined
https://www.illumos.org/issues/1233

Author: r a
Status: New
Priority: Low
Assignee: OI Userland
Category: SFW (Solaris Freeware)
Target version: oi_151_stable
Difficulty: Bite-size
Tags: bind


Can OpenIndiana be shipped with Bind v9.8 as the default version, and also have Bind configured by default to have DNSSEC enabled and for DNSSEC validation to occur and have a valid Root Key along with the root hints file. With RFC5011 Bind will auto update the DNSSEC root key providing it has one valid key defined.







-- 
You have received this notification because you have either subscribed to it, or are involved in it.
To change your notification preferences, please click here: http://www.illumos.org/my/account