Questions tagged [dnssec]

DNSSEC QUESTIONS MUST BE PROGRAMMING RELATED. The Domain Name System Security Extensions (DNSSEC) is a suite of specifications for securing certain kinds of information provided by the Domain Name System (DNS).

DNSSEC QUESTIONS MUST BE PROGRAMMING RELATED. The Domain Name System Security Extensions (DNSSEC) is a suite of specifications for securing certain kinds of information provided by the Domain Name System (DNS).

67 questions
0
votes
2 answers

dnsjava - How to do a Lookup with DNSSEC validation?

dnsjava has DNSSEC support. I'd like to do a simple Lookup, just like the Lookup examples ( http://www.xbill.org/dnsjava/dnsjava-current/examples.html ), but have dnsjava tell me if it validates DNSSEC. (Or, raise an exception if it doesn't.) I've…
SRobertJames
  • 8,210
  • 14
  • 60
  • 107
0
votes
1 answer

Is the sixed field of a DS record protocol?

Can some tell me what the layout is of DS record for DNSsec. A specialy the naming If you look at this DS record: 231.72.212.in-addr.arpa. 3600 IN DS 45767 8 2 93f383a81ff2c124bdd395f51e58b88317cb8852facd93d3f6f30efdd2afa5b8 fieldsnames…
-1
votes
2 answers

Edit BIND config file using PHP

I have a file called named.conf, which is the configuration file for BIND. It has entries enclosed in curly braces. I want to edit and enter a new zone entry into both the internal and external views using PHP. How can I do this. Is there any…
Akhilesh
  • 1,243
  • 4
  • 16
  • 49
-1
votes
1 answer

Why salt of NSEC3 record should be made public?

I'm wondering why NSEC3 record should include salt? I can't imagine why and how resolvers use salt?
-1
votes
1 answer

DNS SERVFAIL Error for normal dig but no error with +trace

I've configured a new zone (IDN domain) at my authoritative DNS server, but it dosesn't work, when I try to troubleshiit using DIG command i receive "SERVFAIL" dig.exe @8.8.8.8 xn--mgba6g.xn--ngbsg9e a ; <<>> DiG 9.12.3 <<>> @8.8.8.8…
refra
  • 1
  • 1
  • 1
-1
votes
1 answer

DNSSEC Key Roll Over regarding DS record updation

Please help me to clarify my doubts, I have a doubt regarding DNSSEC Key Roll Over. If any specific reason to resign every domain within a time period? If it gets resigned and regenerated KSK and ZSK did I need to update new DS record at registrar…
-2
votes
1 answer

google cloud platform load balancer dns amd DNSSEC not working in US

here is my scenario: i have build an LB on GCP (https). Static reserved IP DNSSEC set to on DNS A and CNAME records 4 web servers sit behind the LB back end front end set for https when going via IP, the LB works and the site come up. when going…
1 2 3 4
5