Path: csiph.com!news.uzoreto.com!news.etla.org!nntp-feed.chiark.greenend.org.uk!ewrotcd!usenet-its.stanford.edu!usenet.stanford.edu!not-for-mail From: "@lbutlr" Newsgroups: comp.protocols.dns.bind Subject: Re: $INCLUDE Kexamle.com.+007... Date: Sun, 5 Jul 2020 16:02:21 -0600 Lines: 40 Approved: bind-users@lists.isc.org Message-ID: References: <84EA4A1E-A47D-4CB2-8FEB-B780B9A09C94@kreme.com> <5CEE1B71-98F2-4C39-B552-B3427EFDBDBC@kreme.com> NNTP-Posting-Host: lists.isc.org Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Trace: usenet.stanford.edu 1593986554 763 149.20.1.60 (5 Jul 2020 22:02:34 GMT) X-Complaints-To: action@cs.stanford.edu Cc: bind-users To: Tony Finch Return-Path: X-Original-To: bind-users@lists.isc.org Delivered-To: bind-users@lists.isc.org In-Reply-To: X-Mailer: Apple Mail (2.3645.0.6.2.3) X-Spam-Status: No, score=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW, SPF_HELO_NONE,SPF_PASS autolearn=disabled version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mx.pao1.isc.org X-BeenThere: bind-users@lists.isc.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: BIND Users Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Mailman-Original-Message-ID: <5CEE1B71-98F2-4C39-B552-B3427EFDBDBC@kreme.com> X-Mailman-Original-References: <84EA4A1E-A47D-4CB2-8FEB-B780B9A09C94@kreme.com> Xref: csiph.com comp.protocols.dns.bind:15898 On 05 Jul 2020, at 10:12, Tony Finch wrote: > @lbutlr wrote: >=20 >> When a domain configuration file contains an include line for the = key, >> where is that include looking for the key file? >=20 > ... good question, I have avoided having to find that out ... Heh. > So it sounds like "the current directory" is the answer to your = question. That would certainly explain why it fails then. > However, I don't think you need to $INCLUDE key files. I think maybe = that > used to be a thing when signing a zone had to involve dnssec-signzone? = But > nowadays even dnssec-signzone will automatically insert public keys = into > the signed zone. Ah, that would be good. When I resolve the other issue I posted about I = will check that. My configuration started in =E2=80=A6 um=E2=80=A6 1995? I'm sure I = should start all over with the 9.16 manual from scratch, but you know, I = have all this TV to watch. =F0=9F=98=83 > Does that make sense? It does, and thank you. --=20 It's against my programming to impersonate a deity.