[Unbound-users] Validating the root: translation of ICANN XML file

Carsten Strotmann unbound at strotmann.de
Wed Aug 25 06:32:47 UTC 2010


 On 8/24/10 11:41 PM, =JeffH wrote:
>  
>
> note the "algorithm is unsupported" error msg from dnssec-dsfromkey.
>
> the dnssec-dsfromkey version I'm using is 9.6.1-P2.
>
> thoughts?
>
That version of dnssec-dsfromkey is too old, it does not support SHA256.
You need to upgrade your BIND tools package to a version that does
SHA256, like BIND 9.7.1-P2 or BIND 9.6.2 (and up).

-- Carsten



More information about the Unbound-users mailing list