DNSSEC made simple, is this possible?

[Mark Elkins]

On Wed, 2012-01-11 at 19:26 +0100, Jan-Piet Mens wrote:
> > Next great thing would be for ISC to support the Soft-HSM that
> > OpenDNSSEC uses. I believe that this would make the step of moving to a
> > real hardware HSM a lot easier (if necessary).
> 
> BIND has supported the PKCS#11 interface (./configure --with-pkcs11)
> since 9.6 IIRC, so it ought to be possible to integrate.

Humm... 
https://lists.isc.org/pipermail/bind-users/2010-October/081508.html
(which was a failed attempt - and cry for help)

Anyone have a successful go at this? (that is replicable)

-- 
  .  .     ___. .__      Posix Systems - (South) Africa
 /| /|       / /__       mje at posix.co.za  -  Mark J Elkins, Cisco CCIE
/ |/ |ARK \_/ /__ LKINS  Tel: +27 12 807 0590  Cell: +27 82 601 0496

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4007 bytes
Desc: not available
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20120111/40054075/attachment.bin>