<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<font face="Courier New, Courier, monospace">Is it supported to
bootstrap inline signing using </font><font face="Courier New,
Courier, monospace"><font face="Courier New, Courier, monospace">dnssec-signzone</font>?<br>
<br>
$ named-compilezone -f text -F raw -o example.raw example.com
example.text<br>
<br>
$ </font><font face="Courier New, Courier, monospace"><font
face="Courier New, Courier, monospace">dnssec-signzone</font> -S
-K /etc/bind/keys -O raw -3 ABCDEF -H 19 -A -o example.com -f </font><font
face="Courier New, Courier, monospace"><font face="Courier New,
Courier, monospace">example.raw.signed</font> example.text<br>
<br>
and then load the two files (</font><font face="Courier New,
Courier, monospace"><font face="Courier New, Courier, monospace">example.raw,
</font></font><font face="Courier New, Courier, monospace"><font
face="Courier New, Courier, monospace"><font face="Courier New,
Courier, monospace"><font face="Courier New, Courier,
monospace">example.raw.signed) into an inline signing
configuration.<br>
<br>
The solution is apparently working fine.<br>
<br>
The reason for the above approach is performance. The
initial inline signing is slow (several hours of computing)
when signing a large zone. I have tried different values for
"sig-signing-nodes" and "sig-signing-signatures" - but no
luck.<br>
<br>
<br>
-- <br>
<br>
Niels Haarbo,<br>
DK Hostmaster A/S<br>
</font></font></font></font><font face="Courier New, Courier,
monospace"><font face="Courier New, Courier, monospace"><font
face="Courier New, Courier, monospace"><font face="Courier
New, Courier, monospace"><font face="Courier New, Courier,
monospace"></font></font></font></font></font>
</body>
</html>