dnssec errors on bind 9.2.4

prasadyv · 02-15-2014, 04:45 PM

iam trying to enable dnssec on my bind installtion version 9.2.4
i get the following error:

Starting named:
Error in named configuration:
/etc/named.conf: unknown option 'dnssec-enable'
[FAILED]

I used this in the configuration file:

dnssec-enable yes;

ISC website says all versions of bind 9 support dnssec, any ideas anyone?

bathory · 02-17-2014, 04:41 AM

Hi and welcome to LQ,

I think that you should use a more recent bind version.
The 9.2.4 is 10 years old and in these early 9.x bind versions dnssec was not supported by default (it has to be compiled with openssl in order to support dnssec) and it was missing some options.
You should also upgrade for security reasons.

Regards