-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "itojun" == itojun  <itojun@iijlab.net> writes:
    itojun> 	- there's no way to disable DNSSEC (= crypto) portion, it seems.
    itojun> 	  we may need to disable the whole bind9 tree if MKCRYPTO=no.

  Certainly the 9.3 snapshots have --with-openssl, and if you don't get it
right, then it compiles in dummy crypto. (and dnssec-signzone, etc. just say
"I don't have crypto"). I don't have 9.2 source on my laptop to check if it
does that.

  The libdns, etc. are actually rather useful. It might be nice to install them.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBPdXWVoqHRg3pndX9AQErogP/bAdHcHsQTpJ9el24GBS0A7cdXqpybsQI
Z/11BVszdOxIiJsHa2HY98fsx8c/UFFSwSzGezoPkXYo0yHT3GODPKPbYUFsdDoM
dV4ffKhpA9f6SzO/fdIfgTEhd6/6HsrrIZ9o4QaicPd6BJst8zsFc7WJUDHedZfQ
QY3whbH24Tg=
=+7Mj
-----END PGP SIGNATURE-----