Last active
August 29, 2015 14:22
-
-
Save gryphius/b3a6d691b07c2cc2f1f8 to your computer and use it in GitHub Desktop.
[BLOG-GIST] powerdns secure zone - included in http://blog.weetech.co/2014/11/implementing-dnssec-and-dane-for-email.html
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pdnssec show-zone example.com | |
# Zone is not actively secured | |
# Zone is not presigned | |
# No keys for zone 'example.com'. | |
pdnssec secure-zone example.com | |
# Securing zone with rsasha256 algorithm with default key size | |
# Zone example.com secured | |
# Adding NSEC ordering information |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pdnssec show-zone example.com | grep 'KSK DNSKEY' | |
# KSK DNSKEY = example.com IN DNSKEY 257 3 8 AwEAAbSNOiClmRT0LAclDwtll7hjf0jPBqMBnLJ5IzaNmg1SRa1wSbFounDhI0Mw1Gch6k/APEC629Bk4sXZM9caJF31x2e3MtjEs4n6NdSkdTVAzWI9tFT5/TsuERvbrWpFkT2h7TWWu88rP9sCl4T99bXCi11LQYSCWzDIdIlLyP2OW9+LYDi+OX6V2jCB/yg95hsnELuxrWcM+0aIEWhQVR4U821Qt+p8pa4aK2/1yprAukfkpTS9fiEvstP+kcKNSXLWE8YK8VXA6dtE/8q80qzfUnQL9pveG/Rq1mYTpwFnmeQztthk4OtiT mWwlhqaYyzZ8PAsUyKUY/WWHlf7ieU= ; ( RSASHA256 ) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment