Knot-DNS - PowerDNS TSIG BADSIG chyba

Chyba (Knot-DNS debug log):

[example.com.] TSIG, key 'examplecom_transfer.', verification failed 'BADSIG'

Master (PowerDNS 4.1.6-2)

pdnsutil generate-tsig-key EXAMPLECOM_TRANSFER hmac-sha512
Generating new key with 64 bytes
Create new TSIG key EXAMPLECOM_TRANSFER hmac-sha512 YAE6DVMzi3Ue3RgU4KmSluf+4dRItNr6EYWLhlP2S1HLp6/XHwhY1nX9yU1sIYtUyWTTg8FOp0552NG8Qv9A3SQ==

pdnsutil import-tsig-key EXAMPLE_TRANSFER hmac-sha512 YAE6DVMzi3Ue3RgU4KmSluf+4dRItNr6EYWLhlP2S1HLp6/XHwhY1nX9yU1sIYtUyWTTg8FOp0552NG8Qv9A3SQ==
Imported TSIG key EXAMPLECOM_TRANSFER hmac-sha512

pdnsutil activate-tsig-key example.com EXAMPLECOM_TRANSFER master
Enabled TSIG key EXAMPLECOM_TRANSFER for example.com

pdnsutil get-meta example.com
Metadata for 'example.com'
API-RECTIFY = 1
SOA-EDIT-API = DEFAULT
TSIG-ALLOW-AXFR = EXAMPLECOM_TRANSFER

pdnsutil list-tsig-keys
examplecom_transfer. hmac-sha512. YAE6DVMzi3Ue3RgU4KmSluf+4dRItNr6EYWLhlP2S1HLp6/XHwhY1nX9yU1sIYtUyWTTg8FOp0552NG8Qv9A3SQ==

Slave (Knot-DNS 2.8.1)

key:
  - id: EXAMPLECOM_TRANSFER
    algorithm: hmac-sha512
    secret: YAE6DVMzi3Ue3RgU4KmSluf+4dRItNr6EYWLhlP2S1HLp6/XHwhY1nX9yU1sIYtUyWTTg8FOp0552NG8Qv9A3SQ==

remote:
   - id: DNS_MASTER
     address: 192.168.1.123@53
     key: EXAMPLECOM_TRANSFER

acl:
   - id: ACL_ZONE_TRANSFER
     address: 192.168.1.123
     key: EXAMPLECOM_TRANSFER
     action: notify

zone:
   - domain: example.com
     master: DNS_MASTER
     storage: /var/lib/knot/zones
     file: "%s.zone"
     acl: ACL_ZONE_TRANSFER

Dotaz: Knot-DNS - PowerDNS TSIG BADSIG chyba

Odpovědi