9.18.14
Auto Light Dark
Auto Light Dark
9.18.14
Breadcrumbs

Configuring Bind9 to Use Signed Zone File

  1. Once the zone signing is done, you need to make changes in configuration file named.conf as below:

named.conf

 
# vi /usr/local/etc/named.conf  
...  
 dnssec-validation yes;  
...  
zone "example.net" {  
 type primary;  
 file "example.net.signed";  
};

  1. Stop and start the bind9 service using below command.

›_ Console 

# /usr/local/sbin/named -f -4 -E pkcs11 -c /usr/local/etc/named.conf

  1. Verify log file /var/log/messages shows the signed zone is loaded successfully.

›_ Console 

“zone example.net/IN: loaded serial 0 (DNSSEC signed) 

Jun 13 09:06:57 SP-Bind9 named[25122]: all zones loaded Jun 13 09:06:57 SP-Bind9 named[25122]: running”

tmpv9rwzfj5.jpg

Log output