Bugzilla – Bug 236
make zonec accept RRs before the SOA
Last modified: 2009-07-13 16:01:34 CEST
When setting up a signed DNSSEC zone using the instructions found at http://www.nlnetlabs.nl/dnssec_howto/ I turned into a slight problem.
It turned out that zonec didn't like the signed zones because the dnssec-signzone utility places some records before the SOA record in it's output file.
zonec executes with errors like
complicata.se.zone.signed:75: error: RR before SOA skipped
When moving around the records in the file manually so that SOA is placed at the top, the problem goes away.
Of course this peculiarity of dnssec-signzone tool could be fixed, but since that tool is already much more widely distributed than nsd i would be nice to accept what the current version outputs.
bind-9.3.4-6.0.3.P1.el5_2 (the one shipped with an updated CentOS 5)
Fixed for version 3.2.3.