7 Oct 2020 |
bleve (Gitter) | Well - I have used knotc zone-check to check zone after editing it (and after knot has re-signed the zone) | 16:25:15 |
bleve (Gitter) | But ok. I use kzonecheck instead. | 16:28:23 |
bleve (Gitter) | Done. | 16:32:23 |
bleve (Gitter) | I still think knotc zone-check should work - no idea how :) | 16:33:20 |
libor-peltan-cznic (Gitter) | It seems to me that knotc zone-check does the same as kzonecheck (@salzmdan ?). | 17:20:52 |
Daniel Salzman (Gitter) | yes | 17:21:51 |
Daniel Salzman (Gitter) | if semantic-checks: on is set | 17:23:43 |
bleve (Gitter) | But for kzonecheck you can give zone file.... | 18:15:40 |
bleve (Gitter) | I'd have a feature requests for kzonecheck - it would be nice to have it ignore dnssec records | 18:16:56 |
bleve (Gitter) | as an option. | 18:17:12 |
bleve (Gitter) | --no-dnssec | 18:17:18 |
bleve (Gitter) | so that one could verify edited zone file before loading it. | 18:17:36 |
bleve (Gitter) | --ignore-dnssec | 18:17:54 |
bleve (Gitter) | that would be better name. | 18:17:57 |
bleve (Gitter) | Now I have sripting which removes dnssec records from zone for testing before loading the zone. | 18:18:43 |
bleve (Gitter) | grep -v -E 'RRSIG|NSEC' ${zpath}/${zonefilebase}.zone \ >${zpath}/${zonefilebase}.tmp
then I can test that tmp file to make sure there is no problem with done edits. | 18:20:12 |
Daniel Salzman (Gitter) | Could you create an issue in our gitlab? | 18:20:36 |
bleve (Gitter) | Yes of course. | 18:21:02 |
bleve (Gitter) | #695 | 18:33:12 |
Daniel Salzman (Gitter) | ok | 18:33:25 |
10 Oct 2020 |
bleve (Gitter) | @salzmdan hmh. kzonecheck man page doesn't tell if --dnssec on|off is the default.... | 07:18:20 |
bleve (Gitter) | @salzmdan feature itself looks good. | 07:18:45 |
Daniel Salzman (Gitter) | Good catch! The default is on | 07:19:41 |
bleve (Gitter) | I know. I checked the change but didn't find the information from man page. | 07:23:15 |
bleve (Gitter) | That was the reason I suggested --ignore-dnssec because in that case it would have been obvious - I initially thaught exactly --dnssec on|off :) | 07:24:19 |
12 Oct 2020 |
| @gitterbot:matrix.org left the room. | 15:04:52 |
| Room Avatar Renderer. | 15:11:57 |
| tkrizek changed the room topic to "Deprecated, search for Gitter room directly on Matrix." from "Matrix bridge to https://gitter.im/CZ-NIC/knot". | 15:11:59 |
| tkrizek changed the join rule to "invite" from "public". | 15:12:04 |
5 Aug 2021 |
| @huguei:matrix.org left the room. | 01:28:15 |