lwres [was Re: [Openswan dev] Re: [Openswan Users] more aboutignored or processed SA delete messages]

Paul Wouters paul at xelerance.com
Fri Dec 10 20:35:19 CET 2004


On Fri, 10 Dec 2004, D. Hugh Redelmeier wrote:

> | USE_LWRES?=false
>
> What's up with this?  lwres support was done years ago and was
> considered "the future".  It was the way to get DNSsec integrated into
> OE.  Is it abandoned?

No. It is very much the way DNSSEC will make it into Openswan. But it
requires headers most people do not have isntalled yet per default. Therefor
this is normally disabled in release versions. It is however, enabled in 
CVS.

> I admit that it requires a version of BIND that not everyone has by
> default.  I don't even know if the newer BIND is being taken up by
> distros.

I hope we can soon just have it enabled on every distro.

Paul
-- 
    Math is case-sensitive
                             --- Ian Goldberg


More information about the Dev mailing list