- enable bind.keys file for DNSSEC

[packages/bind.git] / bind-named.conf

diff --git a/bind-named.conf b/bind-named.conf
index 435038a743fe1081dd9b87593515f6c66b4a3d2f..2bbf04fd0edbec06de43a832d06f47072d43cb38 100644 (file)
--- a/bind-named.conf
+++ b/bind-named.conf
@@ -1,5 +1,4 @@
 // This is an exaple configuration file for named ( /etc/named.conf ) 
-// Przyk³adowy plik konfiguracyjny /etc/named.conf dla serwera nazw `named'
 
 options {
        directory "/";
@@ -11,7 +10,9 @@ options {
 //     listen-on { none; };
 //     listen-on-v6 { any; };
 
-       dnssec-validation yes;  # enable DNSSEC validation
+        #dnssec-enable yes;      # enable DNSSEC, default yes
+        dnssec-validation auto;  # enable DNSSEC validation with the key from bind.keys
+        dnssec-lookaside auto;   # enable DNSSEC DLV registry check with the key from bind.keys
 };
 
 zone "localhost" IN {
@@ -55,14 +56,3 @@ logging {
         category xfer-out { xfer-log; };
         category notify { xfer-log; };
 };
-
-managed-keys {
-    "." initial-key 257 3 8
-       "AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF
-        FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX
-        bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD
-        X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz
-        W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS
-        Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq
-        QxA+Uk1ihz0=";
-};