[GTER] Unbound com DNSSEC ajuda

[Jonni Pianezzer]

conteudo do root.key

cat /etc/unbound/root.key
; autotrust trust anchor file
;;id: . 1
;;last_queried: 1506368412 ;;Mon Sep 25 16:40:12 2017
;;last_success: 1506368412 ;;Mon Sep 25 16:40:12 2017
;;next_probe_time: 1506409361 ;;Tue Sep 26 04:02:41 2017
;;query_failed: 0
;;query_interval: 43200
;;retry_time: 8640
.       172800  IN      DNSKEY  257 3 8 
AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0E 
zrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1 
apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmq 
rAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} 
;;state=2 [  VALID  ] ;;count=0 ;;lastchange= 1506090648 ;;Fri Sep 22 
11:30:48 2017
.       172800  IN      DNSKEY  257 3 8 
AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlEx 
OLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9t 
arpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws955 
5KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} 
;;state=1 [ ADDPEND ] ;;count=6 ;;lastchange= 1506090648 ;;Fri Sep 22 
11:30:48 2017


Em 25/09/2017 16:54, Rubens Kuhl escreveu:
> 2017-09-25 16:52 GMT-03:00 Jonni Pianezzer <jhonnyp at deltaativa.com.br>:
>
>> deve ta faltando algo ainda no meu, se mudo para "validator iterator"
>>
>> ele para de resolver tudo, nem localmente nao funciona
>>
>>   connection timed out; no servers could be reached
>>
>> por isso to querendo achar um arquivo unbound.conf que esteja funcionando
>> e comparar com o meu.
>>
>> fiz o que diz nos link que mandasse, mas nao deu resultados. o dns
>> funciona mas nao o dnssec.
>>
>>
> Você só mandou o unbound.conf, e o comportamento depende do unbound.conf e
> do root.key.
>
>
> Rubens
> --
> gter list    https://eng.registro.br/mailman/listinfo/gter


---
Este email foi escaneado pelo Avast antivírus.
https://www.avast.com/antivirus