How do I reset a DNSSEC zone ?

[Alberto Colosi]

is like is missing the file referenced in log

SHA-1 RSA signing is obsolete and banned from NIST and ENRISA is a CVE or should if I remember ell

All CA only use SHA-2 no more version 1 as said before.


SHA-2 and 2048 or greater


yor problem is like file permission or file is missing





________________________________
From: bind-users <bind-users-bounces at lists.isc.org> on behalf of Pierre Couderc <pierre at couderc.eu>
Sent: Sunday, August 20, 2017 1:21 PM
To: bind-users at lists.isc.org
Subject: How do I reset a DNSSEC zone ?

I did do it roughly on a test zone, by erasing the key and erasing all
zone.jnl, zone.signed, etc

hoping come back to the initial status. But I get the message :

dns_dnssec_keylistfromrdataset: error reading private key file
zone/RSASHA1/21477: file not found

That is normal as I have erased it but how to get rid of this message ?

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
bind-users Info Page - lists.isc.org Mailing Lists<https://lists.isc.org/mailman/listinfo/bind-users>
lists.isc.org
To see the collection of prior postings to the list, visit the bind-users Archives. Using bind-users: To post a message to all the list members, send ...



bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
bind-users Info Page - lists.isc.org Mailing Lists<https://lists.isc.org/mailman/listinfo/bind-users>
lists.isc.org
To see the collection of prior postings to the list, visit the bind-users Archives. Using bind-users: To post a message to all the list members, send ...


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20170820/af487bea/attachment.html>