- enable bind.keys file for DNSSEC

- rel 3

Changed files:
    bind-named.conf -> 1.4
    bind.spec -> 1.314

diff --git a/bind-named.conf b/bind-named.conf
index f3d0d389ef47a9781ea470741481af490adfaf04..2bbf04fd0edbec06de43a832d06f47072d43cb38 100644 (file)
--- a/bind-named.conf
+++ b/bind-named.conf
@@ -10,7 +10,9 @@ options {
 //     listen-on { none; };
 //     listen-on-v6 { any; };
 
-       dnssec-validation yes;  # enable DNSSEC validation
+        #dnssec-enable yes;      # enable DNSSEC, default yes
+        dnssec-validation auto;  # enable DNSSEC validation with the key from bind.keys
+        dnssec-lookaside auto;   # enable DNSSEC DLV registry check with the key from bind.keys
 };
 
 zone "localhost" IN {
@@ -54,14 +56,3 @@ logging {
         category xfer-out { xfer-log; };
         category notify { xfer-log; };
 };
-
-managed-keys {
-    "." initial-key 257 3 8
-       "AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF
-        FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX
-        bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD
-        X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz
-        W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS
-        Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq
-        QxA+Uk1ihz0=";
-};

diff --git a/bind.spec b/bind.spec
index bdf0ae713321cffff183e6dc12b93008dbe93e06..a6354a3fed4783582604ded1566b34d70326939f 100644 (file)
--- a/bind.spec
+++ b/bind.spec
@@ -31,7 +31,7 @@ Summary(uk.UTF-8):    BIND - cервер системи доменних імен (
 Summary(zh_CN.UTF-8):  Internet 域名服务器
 Name:          bind
 Version:       %{ver}%{pverdot}
-Release:       2
+Release:       3
 Epoch:         7
 License:       BSD-like
 Group:         Networking/Daemons