[nsd-users] Updating my signed zonefiles
opendaddy at hushmail.com
opendaddy at hushmail.com
Mon Jul 8 22:55:45 UTC 2013
On 8. juli 2013 at 10:33 PM, "Anand Buddhdev" <anandb at ripe.net> wrote:
>
>Not quite. You haven't quite understood zone signing. Here's a
>summary:
>
>1. You run ldns-keygen ONCE, to generate your ZSK and KSK.
>
>2. You edit your zone, and then run ldns-signzone on it to sign
>it, and load it into NSD.
>
>3. Whenever you change your zone, you re-sign it with ldns-
>signzone, and *then* run "nsdc rebuild".
Oh right. Quite a nice process there. Thanks a lot man!
O.D.
More information about the nsd-users
mailing list