[ldns-users] Given a DS and a DNSKEY, how do I check if the DS signs the DNSKEY?

Calle Dybedahl calle at init.se
Mon Nov 18 14:26:50 UTC 2013


On 18 nov 2013, at 15:21, Miek Gieben <miek at miek.nl> wrote:

> "signs"? I think you mean: is the DS is derived from the DNSKEY?
> 
> So I would just do that: convert to the DNSKEY to a DS and compare that to 
> the DS record you're holding.

Right. Of course. I’ve been thinking about that all wrong. Thanks.

-- 
Calle Dybedahl
calle at init.se -*- +46 703 - 970 612







More information about the ldns-users mailing list