Differences

This shows you the differences between two versions of the page.

--- linux:bind [2015/08/12 10:53]
zagi
+++ linux:bind [2015/08/12 14:46] (current)
zagi
@@ Line 2: / Line 2: @@
 ==== DNSSEC ====
+  dnssec-keygen -a 7 -b 2048 -n ZONE domena.org
+  dnssec-keygen -f KSK -a 8 -b 4096 -n ZONE domena.org
+copy generated files in /etc/bind/keys.
+if you put your keys in /etc/bind/keys do not forget about permissions and apparmor!
+put this in zone domena.org
+  inline-signing yes;
+  auto-dnssec maintain;
+  key-directory "/etc/bind/keys/domena.org";
+  sig-validity-interval 3;  // default is 30D
+use dnssec-dsfromkey to create DS DNS records from **KSK files.**
@@ Line 7: / Line 24: @@
-  dnssec-validation auto;\\
+  dnssec-validation auto;
-  dnssec-enable yes;\\
+  dnssec-enable yes;
-  dnssec-lookaside auto;\\
+  dnssec-lookaside auto;
+Add DS records at your domain registrar!
+check your domain with  http://dnsviz.net/