Re: DNSSEC management
> >> What do you use for DNSSEC management of your/customer's domains? Is
> >> there some existing tools/scripts ready or everyone has its own
> >> self-made scripts?
> On 05/03/2011 12:57 AM, Michelle Konzack wrote:
> > Selfmade scripts because other solutions worked not as expected and it
> > was to comlicate to integrate it in my Admin-Panel.
On 03.05.11 11:48, Thomas Goirand wrote:
> Can you shortly describe what's needed to have DNSSEC working? How does
> it work? Just add a new field or something?
For providing DNSSEC, you need to sign the zones, periodically re-sign them,
and periodically push DS recors into parent zones.
For using DNSSEC, you need to provide one or more public keys to your
resolver (recursive nameserver) and maintain that list.
No, it's not easy. Try opendnssec, or google for dnssec and read all the
docs.
--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
The only substitute for good manners is fast reflexes.
Reply to: