Create DS and DLV records

Evan Hunt each at isc.org
Wed May 5 06:46:37 UTC 2010


> dnssec-signzone will produce them when you sign your zone.

Note, by default it only creates the DS records.  To make the DLV records
you have to add a -l argument, such as "-l dlv.isc.org."  The records get
parked in a file called either dsset-<zonename> or dlvset-<zonename>.

> dnssec-dsfromkey will produce produce DS records.  You can convert
> between a DS and DLV record using a ordinary text editor.

...or you can also use the -l argument with dnssec-dsfromkey.

-- 
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.



More information about the bind-users mailing list