Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
linux:bind [2015/08/12 14:05] zagi |
linux:bind [2015/08/12 14:46] (current) zagi |
||
---|---|---|---|
Line 3: | Line 3: | ||
==== DNSSEC ==== | ==== DNSSEC ==== | ||
- | dnssec-keygen -a 7 -b 2048 -n ZONE domena.org | + | |
- | dnssec-keygen -f KSK -a 8 -b 4096 -n ZONE domena.org | + | dnssec-keygen -f KSK -a 8 -b 4096 -n ZONE domena.org |
copy generated files in / | copy generated files in / | ||
Line 13: | Line 13: | ||
put this in zone domena.org | put this in zone domena.org | ||
- | inline-signing yes; | + | |
- | auto-dnssec maintain; | + | auto-dnssec maintain; |
- | key-directory "/ | + | key-directory "/ |
- | sig-validity-interval 3; // default is 30D | + | sig-validity-interval 3; // default is 30D |
- | use dnssec-dsfromkey to create DS from KSK files. | + | use dnssec-dsfromkey to create DS DNS records |
Line 24: | Line 24: | ||
- | dnssec-validation auto;\\ | + | dnssec-validation auto; |
- | dnssec-enable yes;\\ | + | dnssec-enable yes; |
- | dnssec-lookaside auto;\\ | + | dnssec-lookaside auto; |
Add DS records at your domain registrar! | Add DS records at your domain registrar! |