Bug 236 - make zonec accept RRs before the SOA
make zonec accept RRs before the SOA
Product: NSD
Classification: Unclassified
Component: Zonec Code
Other All
: P2 minor
Assigned To: NSD team
Depends on:
  Show dependency treegraph
Reported: 2009-03-13 15:42 CET by Noa Resare
Modified: 2009-07-13 16:01 CEST (History)
1 user (show)

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description Noa Resare 2009-03-13 15:42:29 CET
When setting up a signed DNSSEC zone using the instructions found at http://www.nlnetlabs.nl/dnssec_howto/  I turned into a slight problem. 

It turned out that zonec didn't like the signed zones because  the dnssec-signzone utility places some records before the SOA record in it's output file.

zonec executes with errors like

complicata.se.zone.signed:75: error: RR before SOA skipped

When moving around the records in the file manually so that SOA is placed at the top, the problem goes away.

Of course this peculiarity of dnssec-signzone tool could be fixed, but since that tool is already much more widely distributed than nsd i would be nice to accept what the current version outputs.

bind-9.3.4-6.0.3.P1.el5_2 (the one shipped with an updated CentOS 5)
Comment 1 Matthijs Mekking 2009-07-13 16:01:34 CEST
Fixed for version 3.2.3.