dnssec-keygen not available in Bind9.16-utils package?

[Jiaming Zhang]

Hello David,
I have Oracle Linux 8 instance running bind 9.11.x as well bind 9.16.x and confirm that there’s no dnssec-*​ utilities in the bind9.16-utils​. Although the 9.11 and 9.16 version cannot coexist, you can insead installing the bind9.16-utils​ install bind-utils​. It works still perfect on the instance I ran bind9.16​. Currently on this instance I have both version of bind-libs​ and version 9.11.x of bind-utils​ working together with bind9.16​.

Regards,
Jiaming Zhang

Yixi Meta
Email: J.Zhang at yiximeta.com
Website: yiximeta.com
________________________________
Van: bind-users <bind-users-bounces at lists.isc.org> namens David Carvalho via bind-users <bind-users at lists.isc.org>
Verzonden: Friday, March 24, 2023 10:22:45 AM
Aan: 'Petr Menšík' <pemensik at redhat.com>; bind-users at lists.isc.org <bind-users at lists.isc.org>
Onderwerp: RE: dnssec-keygen not available in Bind9.16-utils package?


Thank you so much for your help.

Unfortunately it seems bind-utils 9.11 and 9.16 can not co-exist (at least in Oracle Linux 8). I had problems with dependencies and didn’t force anything until having more information.

Thanks once again!

Regards

David Carvalho



From: bind-users <bind-users-bounces at lists.isc.org> On Behalf Of Petr Menšík
Sent: 24 March 2023 01:09
To: bind-users at lists.isc.org
Subject: Re: dnssec-keygen not available in Bind9.16-utils package?



Oh, correction. Those were published, but in wrong repository. If you enable CodeReady Builder (CRB) repository, you should be able to install it even with current version. Not sure what is official name on Oracle Linux, use "dnf repolist --all" command to find the name. They are called powertools on CentOS Stream 8.

On RHEL 8 enable it by command:

subscription-manager repos --enable codeready-builder-for-rhel-8-x86_64-rpms

On 3/24/23 01:43, Petr Menšík wrote:

dnssec utilities are in bind9.16-dnssec-utils, which by mistake stayed internal only package. We have built them, but not published them. It would be moved into public repository once RHEL 8.8.0 is released, tracked under bug #2115322 [1]. It should be already available in CentOS Stream 8.

I am sorry for the inconvenience, this issue were missed during our testing. It should be possible to install bind-utils from bind 9.11 together with bind9.16 server until that is fixed. Unless you depend on more recent features in bind9.16-utils, it might help in the mean time.

Regards,
Petr

1. https://bugzilla.redhat.com/show_bug.cgi?id=2115322

On 3/20/23 13:31, David Carvalho via bind-users wrote:

Hello, good morning.

I’m trying to setup DNNSEC and I’ve been using Bind9.16 packages available in Oracle Linux 8. Somehow there are also “Bind” packages, which default to 9.11 version. Being a new installation I went for 9.16. The problem now is that dnssec-keygen seems to be only available in version 9.11, and if I try to install I get problems with dependencies .

Does anyone have some experience with this?



Kind regards

David

--

Petr Menšík

Software Engineer, RHEL

Red Hat, https://www.redhat.com/

PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB

--

Petr Menšík

Software Engineer, RHEL

Red Hat, https://www.redhat.com/

PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20230324/82fa1b00/attachment.htm>