readthefuckingmanual.net

[SOLVED] dnssec-signzone: failed to find keys at the zone apex: not found

Error added: 2008-10-10T15:30:16Z

2 people waiting for the answer...

2 answers found.

Answer 1292 (70.588234% helpful)

Don\'t forget to add the:
$include <ZSK>
$include <KSK>
lines into the zone.db file.
Permalink

Answer 762 (20.0% helpful)

I encountered the same problem when trying to sign a root-zone (in a lab dns scenario).

dnssec-signzone takes the name of the origin usually from the filename of the zone. Obviously, the root zonefile cannot be named \".\".

All you have to do is calling the dnssec-signzone with additional option -o . e.g.

dnssec-signzone -k K.+005+52162 -N unixtime -o . ROOT_ K.+005+38340

where \"ROOT_\" is the name of my root zonefile.

Permalink

Add an answer/solution

If you know the answer, please add your own solution below.
If you don't know, but find out later, please come back and share your answer - there will be other people struggling with this too.


Please enter 61948 here

If you want to be notified via email when this is solved, enter your email address here: