Validujici resolver - overeni

[Jan Kasprzak]

Petr Baláš wrote:
: 2010/8/6 Jan Kasprzak <kas na fi.muni.cz>:
: >        Zdravim,
: >
: > zapnul jsem na svem rekurzivnim DNS serveru validaci pres DNSSEC.
: > Jak lze overit ze to skutecne validuje? Existuje nekde ve svete nejake
: > testovaci DNS jmeno s nevalidnim podpisem? (momentalne nemam moc cas
: > zprovoznovat i DNSSEC u svych domen).
: 
: Sice neporadim ale zato se budu ptat - nejake HOWTO jak validaci zapnout?
: bind verze 9.6, Debian stable

options {
	...
        dnssec-enable yes;
        dnssec-validation yes;
};

trusted-keys {
        "." 257 3 8 "AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0=";
};

do named.conf.

	HOWTO je na www.dnssec.cz a www.dnssec.net.

: Popr. pokud by byly odkazy na HOWTO  i na to podepisovani vlastnich domen,
: tak bych se taky nezlobil :-)

	Viz vyse.

-Y.

-- 
| Jan "Yenya" Kasprzak  <kas at {fi.muni.cz - work | yenya.net - private}> |
| GPG: ID 1024/D3498839      Fingerprint 0D99A7FB206605D7 8B35FCDE05B18A5E |
| http://www.fi.muni.cz/~kas/    Journal: http://www.fi.muni.cz/~kas/blog/ |
Please don't top post and in particular don't attach entire digests to your
mail or we'll all soon be using bittorrent to read the list.     --Alan Cox