How do I set up dnssec ?

6 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

Need help with dnscrypt and dnssec

Hi, I currently have dnscrypt working, and now, I want to add dnssec. dnscrypt is basically a daemon running, and it's configured to 127.0.0.1 under dns in wifi. I have installed dnsmasq, and I am ready to enable dnssec in /usr/local/etc/dnsmasq.conf. My question is the following. Do I...

2. IP Networking

Bind9 DNSSEC and rollerd

Hi all, I've a litte problem to get rollerd running and signing my zones if the ZSK of my zones are near expiring or expired. rollerd is running but do nothing startet with: /usr/bin/perl /usr/sbin/rollerd -rrfile /etc/bind/all.rollrec -directory /etc/bind -logfile /dev/stdout ...

3. Shell Programming and Scripting

Help needed with shell script to search and replace a set of strings among the set of files

Hi, I am looking for a shell script which serves the below purpose. Please find below the algorithm for the same and any help on this would be highly appreciated. 1)set of strings need to be replaced among set of files(directory may contain different types of files) 2)It should search for...

4. Solaris

LC_ALL & LANG are set OK, but others couldn't set locale correctly.

Hi, I have a Solaris (SunOS 5.10) installed, by default with the en_AU.UTF-8 locale. I want to change it to en_US.UTF-8 With AU, I have no issues whatsoever, so I installed the language package and now locale -a shows "en_US.UTF-8". Problem is even with LC_ALL set in etc/default/init, the...

5. UNIX for Dummies Questions & Answers

How to set server's ip address, router, network mask and set if it is an internal or external ip?

Hello, I need to write a program which sets server's ip address, router, network mask. Program also should set if it is an internal or external ip. Maybe someone can help me ? Any information from u is very useful :b: I stopped at .. :( #!/bin/sh A=`hostname -i` echo "server ip address is $A"...

6. Solaris

Problem with running ./configure for DNSSEC-Tools 1.5

checking size of short... configure: error: cannot compute sizeof (short), 77 See `config.log' for more details. configure: error: /bin/bash './configure' failed for validator Above are the last few lines shown before ./configure ended and it was not successful. What am I lacking of? ...

LEARN ABOUT DEBIAN

dnssec-revoke

DNSSEC-REVOKE(8)						       BIND9							  DNSSEC-REVOKE(8)

NAME

       dnssec-revoke - Set the REVOKED bit on a DNSSEC key

SYNOPSIS

       dnssec-revoke [-hr] [-v level] [-K directory] [-E engine] [-f] [-R] {keyfile}

DESCRIPTION

       dnssec-revoke reads a DNSSEC key file, sets the REVOKED bit on the key as defined in RFC 5011, and creates a new pair of key files
       containing the now-revoked key.

OPTIONS

       -h
	   Emit usage message and exit.

       -K directory
	   Sets the directory in which the key files are to reside.

       -r
	   After writing the new keyset files remove the original keyset files.

       -v level
	   Sets the debugging level.

       -E engine
	   Use the given OpenSSL engine. When compiled with PKCS#11 support it defaults to pkcs11; the empty name resets it to no engine.

       -f
	   Force overwrite: Causes dnssec-revoke to write the new key pair even if a file already exists matching the algorithm and key ID of the
	   revoked key.

       -R
	   Print the key tag of the key with the REVOKE bit set but do not revoke the key.

SEE ALSO

       dnssec-keygen(8), BIND 9 Administrator Reference Manual, RFC 5011.

AUTHOR

       Internet Systems Consortium

COPYRIGHT

       Copyright (C) 2009, 2011 Internet Systems Consortium, Inc. ("ISC")

BIND9								   June 1, 2009 						  DNSSEC-REVOKE(8)

Red Hat