On Tue, Nov 09, 2010 at 12:33:36PM -0600, Robert Moskowitz wrote: > On 11/09/2010 12:14 PM, R P Herrold wrote: > > On Tue, 9 Nov 2010, Robert Moskowitz wrote: > > > > > >> Since we now have .com signed I want to get my domain signed as well, > >> but I see that Centos 5.5 is running BIND 9.3.6 and a thread on the BIND > >> list recommends against running a DNSSEC master zone on anything less > >> than 9.6 and you really should be on 9.7. > >> > > The just announced customer only RHEL 5.6 beta notes: > > bind 9.7 - improved DNSsec support > > So is there a Centos 5.6 beta with bind 9.7 or should I switch to > FC13/14? :) > > And given that this system is pretty much ONLY a DNS server, is my > 'risk' of using the beta minimal? I would just wait for CentOS 5.6 and sign later. If you need to move forward more quickly, you might be able to rebuild the SRPM's from Fedora for CentOS without too much hassle. Moving to Fedora 13/14 is fine as long as you're OK with the short lifecycles of the products. Ray