dnssec-signzone

Tony Finch dot at dotat.at
Mon Apr 6 16:32:06 UTC 2020


David Alexandre M. de Carvalho <david at di.ubi.pt> wrote:

> So I'm still fighting with dnssec in BIND 9.8.2 (oracle linux 6).
> Unfortunately no automatic sigining before Bind 9.9, from what I read.

BIND 9.8 has automatic signing, but not inline signing. However nsdiff is
almost as good as inline signing, and I wrote it 9 years ago (!) around
the time of 9.8.0 to make it easier to update signed zones. It's easier
than dnssec-signzone.

https://fanf.livejournal.com/112476.html

http://dotat.at/prog/nsdiff/

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
work to the benefit of all


More information about the bind-users mailing list