Public feed #724654

Untitled

public text v1 · immutable
Raw Edit
·published 2007-10-03 19:20 UTC
rendered paste body
spx $ ls
dummy.keys  dummy.zsk        named.localhost.signed  wizard.pl
dummy.ksk   named.localhost  named.localhost.zs      wizard.pl~

spx $ ls dummy.*
dummy.keys:

dummy.ksk:

dummy.zsk:

spx $ zonesigner -genkeys -gends -ksdir dummy.keysets -kskdirectory dummy.ksk -zskdirectory dummy.zsk -zone dummy named.localhost named.localhost.signed

        if zonesigner appears hung, strike keys until the program completes
        (see the "Entropy" section in the man page for details)

/bin/mv: cannot move `.' to `dummy.zsk/.': Device or resource busy
/bin/mv: cannot move `..' to `dummy.zsk/..': Device or resource busy
/bin/mv: cannot move `.' to `dummy.zsk/.': Device or resource busy
/bin/mv: cannot move `..' to `dummy.zsk/..': Device or resource busy
dnssec-signzone: error: dns_master_load: named.localhost.zs:23: dummy.zsk/Kdummy.+005+05931.key: file not found
dnssec-signzone: failed loading zone from 'named.localhost.zs': file not found
unable to sign zone

spx $ ls
Kdummy.+005+05931.key      dummy.keys  named.localhost         wizard.pl~
Kdummy.+005+05931.private  dummy.krf   named.localhost.signed
Kdummy.+005+36843.key      dummy.ksk   named.localhost.zs
Kdummy.+005+36843.private  dummy.zsk   wizard.pl

spx $ ls dummy.*
dummy.krf

dummy.keys:

dummy.ksk:
Kdummy.+005+16057.key  Kdummy.+005+16057.private

dummy.zsk:


    check existence of zone file
    initial zone verification
zone dummy/IN: loaded serial 3
OK
        zone verified


        if zonesigner appears hung, strike keys until the program completes
        (see the "Entropy" section in the man page for details)

    generating key files
        generating new "cur" ZSK
                /usr/sbin/dnssec-keygen  -r /dev/urandom -a rsasha1 -b 1024 -n zone dummy
        new "cur" ZSK - Kdummy.+005+50778
        generating new "pub" ZSK
                /usr/sbin/dnssec-keygen  -r /dev/urandom -a rsasha1 -b 1024 -n zone dummy
        new "pub" ZSK - Kdummy.+005+09276
        updating the keyrec file for the zone

        generating KSK
                /usr/sbin/dnssec-keygen  -r /dev/urandom -a rsasha1 -b 2048 -n zone -f KSK dummy
        new KSK - Kdummy.+005+06127

        updating the keyrec file for the zone
        updating the keyrec file for the zone

        checking key directories
/bin/mv: cannot move `.' to `dummy.zsk/.': Device or resource busy
/bin/mv: cannot move `..' to `dummy.zsk/..': Device or resource busy
/bin/mv: cannot move `.' to `dummy.zsk/.': Device or resource busy
/bin/mv: cannot move `..' to `dummy.zsk/..': Device or resource busy


    adding key includes to zone file
        dummy's new serial number - 4

    signing zone
                /usr/sbin/dnssec-signzone  -g -d dummy.keysets -k Kdummy.+005+06127 -o dummy -e +2592000 -f named.localhost.signed named.localhost.zs Kdummy.+005+50778
dnssec-signzone: error: dns_master_load: named.localhost.zs:23: dummy.zsk/Kdummy.+005+50778.key: file not found
dnssec-signzone: failed loading zone from 'named.localhost.zs': file not found
unable to sign zone