[Unbound-users] Validating the root: translation of ICANN XML file

Carsten Strotmann unbound at strotmann.de
Wed Aug 25 06:32:47 UTC 2010

 On 8/24/10 11:41 PM, =JeffH wrote:
> note the "algorithm is unsupported" error msg from dnssec-dsfromkey.
> the dnssec-dsfromkey version I'm using is 9.6.1-P2.
> thoughts?
That version of dnssec-dsfromkey is too old, it does not support SHA256.
You need to upgrade your BIND tools package to a version that does
SHA256, like BIND 9.7.1-P2 or BIND 9.6.2 (and up).

-- Carsten

More information about the Unbound-users mailing list