Skip to content

Home

Jump to bottom
Danny Fullerton edited this page Dec 2, 2018 · 2 revisions

Welcome to the dnssec-reverb wiki!

This is just a dump... nothing of interest.

# dnssec-reverb status mantor.org
mantor.org's KSK = Kmantor.org.+013+31823
mantor.org.     3600    IN      DS      31823 13 2 4b73c2f5d61f2962d2ca9c11c37d934f2cbc62c39dda558a5e5ca1cc2e617204
mantor.org's ZSK = Kmantor.org.+013+59893

# dnssec-reverb ksk-add mantor.org
/usr/local/bin/ldns-keygen -a ECDSAP256SHA256 -k mantor.org
mantor.org's KSK = Kmantor.org.+013+31823
mantor.org.     3600    IN      DS      31823 13 2 4b73c2f5d61f2962d2ca9c11c37d934f2cbc62c39dda558a5e5ca1cc2e617204
mantor.org's next KSK = Kmantor.org.+013+01769
mantor.org.     3600    IN      DS      1769 13 2 b6c2e0255b736d57f661c6389dfb99dc16db4d51e739c12ae303b210cded734b
mantor.org's ZSK = Kmantor.org.+013+59893

Add to registrar

# dnssec-reverb -s ksk-roll mantor.org
mantor.org 's KSK: valid -> removed: Kmantor.org.+013+31823
mantor.org 's KSK: next  -> current: Kmantor.org.+013+01769
mantor.org's KSK = Kmantor.org.+013+01769
mantor.org.     3600    IN      DS      1769 13 2 b6c2e0255b736d57f661c6389dfb99dc16db4d51e739c12ae303b210cded734b
mantor.org's ZSK = Kmantor.org.+013+59893
signzone returns 0
zone mantor.org is ok
ok
ok

# dnssec-reverb status mantor.org      
mantor.org's KSK = Kmantor.org.+013+01769
mantor.org.     3600    IN      DS      1769 13 2 b6c2e0255b736d57f661c6389dfb99dc16db4d51e739c12ae303b210cded734b
mantor.org's ZSK = Kmantor.org.+013+59893
Clone this wiki locally