<div dir="ltr">so the <div><br></div><div><a href="http://dnssec-debugger.verisignlabs.com">dnssec-debugger.verisignlabs.com</a> showed my <span style="color:rgb(103,103,103);font-family:Arial,Helvetica,sans-serif;background-color:rgb(223,223,223)">DS</span><span class="gmail-keytag" style="color:rgb(103,103,103);font-family:Arial,Helvetica,sans-serif;background-color:rgb(223,223,223)">=20326/SHA-256</span><span style="color:rgb(103,103,103);font-family:Arial,Helvetica,sans-serif;background-color:rgb(223,223,223)"> is now in the chain-of-trust</span><br></div><div><span style="color:rgb(103,103,103);font-family:Arial,Helvetica,sans-serif;background-color:rgb(223,223,223)"><br></span></div><div><span style="color:rgb(103,103,103);font-family:Arial,Helvetica,sans-serif;background-color:rgb(223,223,223)"><br></span></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Aug 15, 2017 at 7:36 PM, Sameka McNeil - NOAA Affiliate <span dir="ltr"><<a href="mailto:sameka.s.mcneil@noaa.gov" target="_blank">sameka.s.mcneil@noaa.gov</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Could someone give me a hand. <div><br></div><div>I added the new root KSK to my bind 9 configuration using the trusted-keys configuration. <div><br></div><div>How to I know if its trusted and validated? </div><div><br></div><div>Thank you for any assistance </div></div><div class="gmail_extra"><div><div class="h5"><br><div class="gmail_quote">On Tue, Aug 15, 2017 at 4:47 PM, Evan Hunt <span dir="ltr"><<a href="mailto:each@isc.org" target="_blank">each@isc.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>On Tue, Aug 15, 2017 at 07:54:55PM +0000, Paul Hoffman wrote:<br>
> On Aug 10, 2017, at 2:03 PM, Evan Hunt <<a href="mailto:each@isc.org" target="_blank">each@isc.org</a>> wrote:<br>
> > If you run a recent BIND, "rndc managed-keys status"<br>
><br>
> That works in BIND 9.11.x; is there any equivalent for BIND 9.10.x, which<br>
> is still much more prevalent in distros?<br>
<br>
</span>"rndc secroots" will dump a list of trusted keys, and the managed-keys.bind<br>
file is readable and has comments that indicate whether trust is pending or<br>
active for each key.<br>
<span class="m_5444864897107634669m_3819981518672483276im m_5444864897107634669m_3819981518672483276HOEnZb"><br>
--<br>
Evan Hunt -- <a href="mailto:each@isc.org" target="_blank">each@isc.org</a><br>
Internet Systems Consortium, Inc.<br>
</span><div class="m_5444864897107634669m_3819981518672483276HOEnZb"><div class="m_5444864897107634669m_3819981518672483276h5">______________________________<wbr>_________________<br>
ksk-rollover mailing list<br>
<a href="mailto:ksk-rollover@icann.org" target="_blank">ksk-rollover@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/ksk-rollover" rel="noreferrer" target="_blank">https://mm.icann.org/mailman/l<wbr>istinfo/ksk-rollover</a><br>
<br>
</div></div></blockquote></div><br><br clear="all"><div><br></div></div></div><span class="HOEnZb"><font color="#888888">-- <br><div class="m_5444864897107634669m_3819981518672483276gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><span style="color:rgb(136,136,136)">-- </span><br style="color:rgb(136,136,136)"><span style="color:rgb(136,136,136)">Sameka S. McNeil </span><br style="color:rgb(136,136,136)"><span style="font-size:12.8px;color:rgb(136,136,136)"> </span><br style="font-size:12.8px;color:rgb(136,136,136)"><span style="color:rgb(136,136,136)"> </span><br style="color:rgb(136,136,136)"><br></div></div></div></div>
</font></span></div></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><span style="color:rgb(136,136,136)">-- </span><br style="color:rgb(136,136,136)"><span style="color:rgb(136,136,136)">Sameka S. McNeil </span><br style="color:rgb(136,136,136)"><span style="font-size:12.8px;color:rgb(136,136,136)">Phone: </span><a value="+13016285644" style="font-size:12.8px;color:rgb(17,85,204)">301.628.5644</a><span style="font-size:12.8px;color:rgb(136,136,136)"> </span><br style="font-size:12.8px;color:rgb(136,136,136)"><span style="font-size:12.8px;color:rgb(136,136,136)">Cell: </span><a value="+12023609428" style="font-size:12.8px;color:rgb(17,85,204)">202.360.9428</a><span style="color:rgb(136,136,136)"> </span><br style="color:rgb(136,136,136)"><br></div></div></div></div>
</div>