[BlueOnyx:12139] SNI,, and also-notify in named.conf

Gary Sedgwick gary at symbion.co.uk
Sat Feb 2 12:38:21 -05 2013


Hi everyone,

I didn't hear anything back from my post a couple of weeks ago, so I 
assume no-one is that bothered about anything more complicated in bind's 
config.  This is the fix I've implemented for my own use case, but I 
think it should apply to just about everyone that has secondary DNS 
servers configured (if you've set up a list of IPs to allow zone 
transfers, you'd surely expect to also notify them when DNS entries 
change).  I would be grateful if this could be included in the official 
packages:

[root at leon dns]# pwd
/usr/sausalito/handlers/base/dns
[root at leon dns]# diff dns_generate.pl.orig dns_generate.pl
274a275,277
 >       . "; };\n"
 >       . "  also-notify { "
 >       . join("; ", $main::cce->scalar_to_array($obj->{zone_xfer_ipaddr}))

My second question: has anyone implemented Server Name Indication (SNI) 
on BlueOnyx?  I did a bit of searching but couldn't find any mention of 
this.  At a glance, it seems the openssl version should have TLS/SNI on 
by default, and I presume this is the version used by httpd... so is it 
just a case of making the front-end compatible (so it doesn't complain 
if different vsites are configured with different certs)?  Again, I'm 
willing to do the work to get this up and running if someone hasn't 
already - I presume this would be something people would want...

Gary



More information about the Blueonyx mailing list