Re: DNSSEC and DLZ

> I am using BIND with the DLZ driver from a while. The version I am using
> is 9.10.2-P3.  I am trying to enable the DNSSEC feature, but I can't find
> a way to have it working with DLZ.From the posts I read in the bind-users
> mailing list, it sounds that DNSSEC is not supported yet in DLZ.  Inside
> the file README in the folder contrib/dlz, I can't find any reference
> (callback function) to DNSSEC.Does someone have any news/hints about this
> topic?

DLZ has no DNSSEC support.

To generate a DNSSEC signed version of a DLZ zone, you could configure
it as a hidden master, then use inline-signing on a slave.  The slave
would transfer the zone in from the DLZ master and sign it.

--
Evan Hunt -- [email protected]
Internet Systems Consortium, Inc.

------------------------------------------------------------------------------