1,784
edits
Changes
no edit summary
=== How to create keys for a new domain ===
=== How to create keys for a new domain ===
cd keys
dnssec-keygen -r/dev/random -a RSASHA1 -b 1024 -n ZONE codewiz.org
dnssec-keygen -r/dev/random -a RSASHA1 -b 1024 -n ZONE codewiz.org
dnssec-keygen -r/dev/random -f KSK -a RSASHA1 -b 1280 -n ZONE codewiz.org
dnssec-keygen -r/dev/random -f KSK -a RSASHA1 -b 1280 -n ZONE codewiz.org
(the above commands take a very long time!)
=== How to manually sign a zone ===
=== How to manually sign a zone ===