31 Čec
2017
31 Čec
'17
10:16
Hello,
I am a bit news with Knot DNS 2.5.3 and also DNSSEC as well.
I am succesfully migrated from a non dnssec bind to knot dns, this is working like a
charm.
Now I would like to migrate one zone into DNSSEC.
Everything is working *except* getting keys (ZSK/KSK) to publish to Gandi.
I got this tutorial (french sorry) :
https://www.swordarmor.fr/gestion-automatique-de-dnssec-avec-knot.html that seems to works
BUT the publication of the DNSKEY has chenged, and I didn't find a nice way to get
it.
Have any ideas ?
Regards,
Xavier
31 Čec
31 Čec
11:00
Hello Xavier,
Your question is a bit unclear to me.
Where do you have a problem?
a) Finding your KSK for your zone?
b) Finding the DNSKEY text box on the Gandi website?
Answer to a):
knotc zone-read <domain> <domain> DNSKEY
Answer to b):
I'm a Gandi customer myself. Gandi requires the DNSKEY (not the DS
record). Note also that Gandi does not support DNSSEC for all TLDs. This
is indicated in the Gandi user interface when managing a domain.
Daniel
11:25
Hello Daniel
Where do you have a problem?
a) Finding your KSK for your zone?
It was this question :)
b) Finding the DNSKEY text box on the Gandi website?
Answer to a):
knotc zone-read <domain> <domain> DNSKEY
Answer to b):
I'm a Gandi customer myself. Gandi requires the DNSKEY (not the DS
record). Note also that Gandi does not support DNSSEC for all TLDs. This
is indicated in the Gandi user interface when managing a domain.
Thanks for your answer, this is for a .fr domain, that hopefully support DNSKEY :)
Now I can continue my try :)
Many thanks :)
Xavier
13:51
On lun. 31 juil. 11:00:38 2017, Daniel Stirnimann wrote:
Hello Xavier,
Your question is a bit unclear to me.
Where do you have a problem?
a) Finding your KSK for your zone?
b) Finding the DNSKEY text box on the Gandi website?
Answer to a):
knotc zone-read <domain> <domain> DNSKEY
Answer to b):
I'm a Gandi customer myself. Gandi requires the DNSKEY (not the DS
record). Note also that Gandi does not support DNSSEC for all TLDs. This
is indicated in the Gandi user interface when managing a domain.
Thanks for you feedbacks :) I’ve update my article with the `knotc
zone-read` command.
https://www.swordarmor.fr/gestion-automatique-de-dnssec-avec-knot.html#publ…
--
alarig
2484
days inactive
2484
days old
3 comments
3 participants
participants (3)
-
Alarig Le Lay -
Daniel Stirnimann -
Xavier Beaudouin