- add root DNSSEC key

- update named.root
- rel 2

Changed files:
    bind-named.conf -> 1.2
    bind.spec -> 1.302

diff --git a/bind-named.conf b/bind-named.conf
index c4d65b7db13fb8cd4aaed1af13a5715d1dc84883..435038a743fe1081dd9b87593515f6c66b4a3d2f 100644 (file)
--- a/bind-named.conf
+++ b/bind-named.conf
@@ -10,6 +10,8 @@ options {
 // IPv4 will still work
 //     listen-on { none; };
 //     listen-on-v6 { any; };
+
+       dnssec-validation yes;  # enable DNSSEC validation
 };
 
 zone "localhost" IN {
@@ -54,3 +56,13 @@ logging {
         category notify { xfer-log; };
 };
 
+managed-keys {
+    "." initial-key 257 3 8
+       "AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF
+        FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX
+        bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD
+        X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz
+        W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS
+        Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq
+        QxA+Uk1ihz0=";
+};

diff --git a/bind.spec b/bind.spec
index 8c5d617f01ccfd04cad88591fd6a7521718d9229..d027b1fa884f164b504579b1dff226c8d43a1177 100644 (file)
--- a/bind.spec
+++ b/bind.spec
@@ -25,7 +25,7 @@ Summary(zh_CN.UTF-8): Internet 域名服务器
 %define        pver            P2
 Name:          bind
 Version:       %{ver}.%{pver}
-Release:       1
+Release:       2
 Epoch:         7
 License:       BSD-like
 Group:         Networking/Daemons
@@ -41,7 +41,7 @@ Source5:      http://www.venaas.no/ldap/bind-sdb/dnszone-schema.txt
 Source6:       %{name}-hip.tar.gz
 # Source6-md5: 62a8a67f51ff8db9fe815205416a1f62
 Source7:       ftp://rs.internic.net/domain/named.root
-# Source7-md5: d8e68f8f1d76960cb2a434e74b8868b4
+# Source7-md5: 013336e29e65923682f7bce094bb3e5c
 Source8:       %{name}-127.0.0.zone
 Source9:       %{name}-localhost.zone
 Source10:      %{name}-named.conf