[Freeipa-users] dnssec support in 4.1

[Alexander Bokovoy]

On Wed, 22 Jul 2015, Andrew E. Bruno wrote:
>Apologies if this has been answered before but we're interested in
>dnssec support in FreeIPA.  Running Centos 7.1.1503, ipa-server 4.1.0-18
>and following the docs here:
>https://www.freeipa.org/page/Howto/DNSSEC
>
>and
>
>http://www.freeipa.org/page/Releases/4.1.0#DNSSEC_Support
>
># ipa-dns-install --dnssec-master
>Usage: ipa-dns-install [options]
>
>ipa-dns-install: error: no such option: --dnssec-master
>
>
>Is this not supported in 4.1.0?  If not, is there a manual way to get
>zone signing to work?
DNSSEC support is switched off in RHEL 7.1 (and CentOS 7.1) but is
available in Fedora 21+/upstream bits.

We plan to bring DNSSEC support to next RHEL 7 update, thanks to
stabilization work done after RHEL 7.1 release.
-- 
/ Alexander Bokovoy