[Pdns-users] DNSSEC same key for all

azurit at pobox.sk azurit at pobox.sk
Mon May 20 08:41:38 UTC 2019


Hi Frank,

it's mandatory for .CZ domains, so if you don't sign every domain with  
the same key, you need to register a KEYSET for every domain. So this  
is what i'm trying to solve.





Citát frank+pdns--- via Pdns-users <pdns-users at mailman.powerdns.com>:

> Hi Azur,
>
> It’s possible to do so, by manipulating the database directly (see  
> the cryptokeys table).
>
> However, let’s take a step back: what problem are you trying to  
> solve? As far as I know, there’s not a single TLD where the use of  
> KEYSETs is mandatory. Some offer it as an extra feature, but I am  
> not aware of any TLD where this would be mandatory.
>
> Kind Regards,
>
> Frank Louwers
> Certified PowerDNS Consultant @ Kiwazo.be
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> https://mailman.powerdns.com/mailman/listinfo/pdns-users





More information about the Pdns-users mailing list