vedetta-com/dithematic

OpenBSD DNS name server

dithematic's Issues

Syntax error

zoneadd example.com

Imported TSIG key tsig.example.com hmac-sha512
reconfig start, read /etc/nsd.conf
/etc/nsd.conf:2: at 'control-enable:': error: syntax error
read /etc/nsd.conf failed: 1 errors in configuration file

ssh -4 -i /home/tsig/.ssh/id_ed25519 -l tsig dig.example.com "exit"

Warning: Permanently added '111.222.333.444' (ECDSA) to the list of known hosts.
PTY allocation request failed on channel 0
/usr/local/share/doc/dithematic/validate.tsig:6: error: syntax error
/usr/local/share/doc/dithematic/validate.tsig:6: error: last key has no secret blob
read /usr/local/share/doc/dithematic/validate.tsig failed: 2 errors in configuration file
Connection to 111.222.333.444 closed

env NS="dig.example.com" tsig-share tsig.example.com

Warning: Permanently added '104.156.237.135' (ECDSA) to the list of known hosts.
Imported TSIG key tsig.example.com hmac-sha512
reconfig start, read /etc/nsd.conf
/etc/nsd.conf:20: error: cannot open include file '/etc/tsig.example.com': Permission denied
/etc/nsd.conf:22: at 'remote-control:': error: syntax error
/etc/nsd.conf:22: error: last key has no secret blob
read /etc/nsd.conf failed: 3 errors in configuration file

I do not see these syntax errors was hoping you might know what they are.
Thanks!

Update SRV records as per RFC 8314

Namaste,

As per RFC 8314 [1], the use of STARTTLS is to be deprecated in favour of Implicit TLS. Further, there is a new "_submissions" SRV record for the 465 port.

We may want to change src/usr/local/share/examples/dithematic/example.com.zone from

_submission._tcp.example.com.	86400	IN	SRV	0 1 465 mercury.example.com.
_submission._tcp.example.com.	86400	IN	SRV	5 1 587 mercury.example.com.

to

_submissions._tcp.example.com.	86400	IN	SRV	0 1 465 mercury.example.com.
_submission._tcp.example.com.	86400	IN	SRV	0 0 0   .

Dhanyavaad.

[1] - https://tools.ietf.org/html/rfc8314

fresh install failures...

So im really trying to just get this rolled out on one of my hosts, however im getting nowhere

tsig-secret tsig.example.com && tsig-change tsig.example.com && tsig-share tsig.example.com
tsig-secret tsig.ddns.example.com && tsig-change tsig.ddns.example.com

as per the readme... however this does nothing..... because

ns1# which tsig-secret
/usr/local/bin/tsig-secret
ns1# cat /usr/local/bin/tsig-secret
#!/bin/sh

and again.... frresh install

missing: ./etc/ssl/dns/.DNSKEY
missing: ./etc/ssl/dns/private/.SK
missing: ./etc/ssl/dns/private/tsig.
missing: ./var/unbound/db/root.key
missing: ./var/unbound/etc/root.hints

ns1# rcctl enable nsd unbound pdns_server
ns1# rcctl restart nsd unbound pdns_server
nsd(failed)
unbound(ok)
unbound(ok)
pdns_server(failed)

nsd-checkconf /var/nsd/etc/nsd.conf
/var/nsd/etc/nsd.conf:20: error: cannot open include file '/var/nsd/etc/tsig.example.com': No such file or directory
/var/nsd/etc/nsd.conf:22: at 'remote-control:': error: syntax error
/var/nsd/etc/nsd.conf:22: error: last key has no secret blob
read /var/nsd/etc/nsd.conf failed: 3 errors in configuration file

and /etc/pdns/pdnsd.conf has no sqlite configuration

Makefile.local

I have 2 VPS from Vultr NS1 (Master) and NS2 (Slave). How do I fill in the overrides for NS2 in the Makefile.local, do I leave the MASTER and MASTER_HOST blank to designate that NS2 is slave? Is the slave set up with the same exact procedure as the master other than different overrides in Makefile.local. Thanks

why ip-address: 127.0.0.1@10053

why ever change port number
ip-address: 127.0.0.1@10053
why not
ip-address: 127.0.0.53@53
for example

Question ddns

Hey Horia,
is the ddns zone and user required to operate properly ( All my servers are static). Also do both nameservers get treated the same as far as the directions for installation (other than switching Master and Slave in Makefile). Thanks!

not sure whats wrong ....... but this is what happens with a make install

missing: ./etc/ssl/dns/.DNSKEY
missing: ./etc/ssl/dns/private/.SK
missing: ./etc/ssl/dns/private/tsig.
missing: ./usr/local/bin/nsec3salt
missing: ./var/unbound/db/root.key
missing: ./var/unbound/etc/root.hints