[nsd-users] NSD and DNSSEC signature refreshing and ZSK rotation

Paul Wouters paul at nohats.ca
Thu Feb 15 05:07:40 UTC 2018



> On Feb 14, 2018, at 20:02, Jasper Wallace <jasper at pointless.net> wrote:
> 
> 
> Hi,
> 
> When NSD serves a signed zone will it also re-sign it and rotate ZSK's as 
> needed? Or do you have to use e.g. OpenDNSSEC to handle it?

You need opendnssec or another tool that handles key management and signing. nsd just serves the dns data 

Paul




More information about the nsd-users mailing list