DNSSEC Godaddy Style

[Alan Clegg]

On Aug 21, 2013, at 9:28 AM, Alan Clegg <alan at clegg.com> wrote:

> 
> On Aug 21, 2013, at 9:21 AM, Eric Davis <eric at mail.rockefeller.edu> wrote:
> 
>> Anyone have any experience uploading DS records to Godaddy?  They are asking for the Digest in addition to the public key and I’m a little lost.  What is the digest and how can I find it?  I’m using an Infoblox appliance.(i know…cringe!)
> 
> They are looking for the hash of the KSK.  Seems a bit silly to need them both, as one can generate the hash from the keying material:


For reference, here's how from the command line:

       dig clegg.com dnskey | dnssec-dsfromkey -f - clegg.com

Obviously, replace "clegg.com" with your domain in both places.

AlanC
-- 
Alan Clegg | +1-919-355-8851 | alan at clegg.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20130823/6c3fdc1e/attachment.bin>