hooks in bind's DNSSEC automation to trigger external scripting of DS RECORDS updates, when CDS/CDNSKEY polling is (still) not available?

Tony Finch dot at dotat.at
Thu Jun 10 12:38:18 UTC 2021

PGNet Dev <pgnet.dev at gmail.com> wrote:
> Has anyone here on-list figured out how to hook bind's internal signing
> process to *trigger* and external script to exec those API pushes?

I have not, and I also want to be able to do this, and I also want
scripting hooks for whenever any keys change so that I can stash them
somewhere safer.

f.anthony.n.finch  <dot at dotat.at>  https://dotat.at/
Rockall, Malin, Hebrides: Southwest veering west, 4 to 6, occasionally
7 at first. Rough, but slight or moderate in southeast Malin and
southeast Hebrides. Rain with fog patches, showers later. Moderate or
good, occasionally very poor at first.

More information about the bind-users mailing list