DNSSec

From Jan's Wiki
Revision as of 19:40, 12 February 2015 by Der Jan (talk | contribs)
Jump to navigation Jump to search

How to setup DNSSEC with powerdns:

  • Add dnssec to pdns.conf:
gpgsql-dnssec=yes
sudo pdnssec add-zone-key conti.work zsk active ecdsa384
sudo pdnssec add-zone-key conti.work ksk active ecdsa384
sudo pdnssec secure-zone conti.work
sudo pdnssec rectify-zone conti.work

Upload public ZSK [1]

sudo pdnssec export-zone-dnskey conti.work 1 

Upload public KSK [2]

sudo pdnssec export-zone-dnskey conti.work 2

[3]