DNSSEC management

This is a MIME-formatted message. If you see this text it means that your
E-mail software does not support MIME-formatted messages.


Hello Marek Podmaka,

Am 2011-05-02 10:39:39, hacktest Du folgendes herunter:

Hello all,

What do you use for DNSSEC management of your/customer's domains? Is
there some existing tools/scripts ready or everyone has its own
self-made scripts?

Selfmade scripts because other solutions worked not as expected and it
was to comlicate to integrate it in my Admin-Panel.

Thanks, Greetings and nice Day/Evening
Michelle Konzack

##################### Debian GNU/Linux Consultant ######################
Development of Intranet and Embedded Systems with Debian GNU/Linux

France EURL UG (limited liability)
Owner Michelle Konzack Owner Michelle Konzack

Apt. 917 (homeoffice)
50, rue de Soultz Kinzigstraße 17
67100 Strasbourg/France 77694 Kehl/Germany
Tel: +33-6-61925193 mobil Tel: +49-177-9351947 mobil
Tel: +49-176-86004575 office

<http://www.itsystems.tamay-dogan.net/> <http://www.flexray4linux.org/>
<http://www.debian.tamay-dogan.net/> <http://www.can4linux.org/>

Jabber
ICQ #328449886

Linux-User #280138 with the Linux Counter, http://counter.li.org/





To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact
Archive: http://lists.debian.org/

On 05/03/2011 12:57 AM, Michelle Konzack wrote:

Hello Marek Podmaka,

Am 2011-05-02 10:39:39, hacktest Du folgendes herunter:

Hello all,

What do you use for DNSSEC management of your/customer's domains? Is
there some existing tools/scripts ready or everyone has its own
self-made scripts?

Selfmade scripts because other solutions worked not as expected and it
was to comlicate to integrate it in my Admin-Panel.

Thanks, Greetings and nice Day/Evening
Michelle Konzack

Can you shortly describe what's needed to have DNSSEC working? How does
it work? Just add a new field or something?

Thomas


To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact
Archive: http://lists.debian.org/

>> What do you use for DNSSEC management of your/customer's domains? Is
>> there some existing tools/scripts ready or everyone has its own
>> self-made scripts?

On 05/03/2011 12:57 AM, Michelle Konzack wrote:
> Selfmade scripts because other solutions worked not as expected and it
> was to comlicate to integrate it in my Admin-Panel.

On 03.05.11 11:48, Thomas Goirand wrote:

Can you shortly describe what's needed to have DNSSEC working? How does
it work? Just add a new field or something?

For providing DNSSEC, you need to sign the zones, periodically re-sign them,
and periodically push DS recors into parent zones.

For using DNSSEC, you need to provide one or more public keys to your
resolver (recursive nameserver) and maintain that list.

No, it's not easy. Try opendnssec, or google for dnssec and read all the
docs.
Matus UHLAR - fantomas, ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
The only substitute for good manners is fast reflexes.


To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact
Archive: http://lists.debian.org/

This is a MIME-formatted message. If you see this text it means that your
E-mail software does not support MIME-formatted messages.


Hello Thomas Goirand,

Am 2011-05-03 11:48:57, hacktest Du folgendes herunter:

Can you shortly describe what's needed to have DNSSEC working? How does
it work? Just add a new field or something?

You can search google for "How to setup DNSSEC?" and you will find the
HOWTOs and more. Also you can install "bind9-doc" which describe how to
setup DNSSEC.

I was strictly following the Bv9ARM manual and then the files from
/usr/share/doc/bind9-doc/ and it just worked.

NOTE: Do NOT FORGET to update the serial number before signing
the zones because otherwise you will run into troubles..

Thomas

Thanks, Greetings and nice Day/Evening
Michelle Konzack

##################### Debian GNU/Linux Consultant ######################
Development of Intranet and Embedded Systems with Debian GNU/Linux

France EURL UG (limited liability)
Owner Michelle Konzack Owner Michelle Konzack

Apt. 917 (homeoffice)
50, rue de Soultz Kinzigstraße 17
67100 Strasbourg/France 77694 Kehl/Germany
Tel: +33-6-61925193 mobil Tel: +49-177-9351947 mobil
Tel: +49-176-86004575 office

<http://www.itsystems.tamay-dogan.net/> <http://www.flexray4linux.org/>
<http://www.debian.tamay-dogan.net/> <http://www.can4linux.org/>

Jabber
ICQ #328449886

Linux-User #280138 with the Linux Counter, http://counter.li.org/





To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact
Archive: http://lists.debian.org/

On Mon, 02 May 2011, Marek Podmaka wrote:

What do you use for DNSSEC management of your/customer's domains? Is
there some existing tools/scripts ready or everyone has its own
self-made scripts?

Well, you could roll out your own, of course, but there are good ones out
there already.

We're testing this one: http://registro.br/dnsshim/index-EN.html

DNSSHIM is software maitained by NIC.br, responsible for all of the .br TLD
operations. It works as a shadow master server, so it is extremely easy to
deploy on BIND-like DNSSEC infrastructures.

There are other such DNSSEC key lifetime management suites. I think RIPE
has published one as well (but I am not sure it is FLOSS). Google will find
them.

"One disk to rule them all, One disk to find them. One disk to bring
them all and in the darkness grind them. In the Land of Redmond
where the shadows lie." -- The Silicon Valley Tarot
Henrique Holschuh


To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact
Archive: http://lists.debian.org/