[nsd-users] Updating my signed zonefiles

opendaddy at hushmail.com opendaddy at hushmail.com
Tue Jul 9 00:55:45 CEST 2013


On 8. juli 2013 at 10:33 PM, "Anand Buddhdev" <anandb at ripe.net> wrote:
>
>Not quite. You haven't quite understood zone signing. Here's a 
>summary:
>
>1. You run ldns-keygen ONCE, to generate your ZSK and KSK.
>
>2. You edit your zone, and then run ldns-signzone on it to sign 
>it, and load it into NSD.
>
>3. Whenever you change your zone, you re-sign it with ldns-
>signzone, and *then* run "nsdc rebuild".

Oh right. Quite a nice process there. Thanks a lot man!

O.D.



More information about the nsd-users mailing list