Re: Signing with the KSK and ZSK

2009-12-08 Thread Chris Buxton
On Dec 8, 2009, at 2:03 AM, xu dong wrote: Hi folks, i have a question about signing zone files with the ksk and the zsk, as i know,when signing the zone files i have to use the ksk and zsk both,just as following: dnssec-signzone -o domain-name -t -k KSK zone-name ZSK but i want to sign

Re: Signing with the KSK and ZSK

2009-12-08 Thread Mark Andrews
In message 2ac8e9ad0912072303u6327b50eoc06cbfe232632...@mail.gmail.com, xu dong writes: Hi folks, i have a question about signing zone files with the ksk and the zsk, as i know,when signing the zone files i have to use the ksk and zsk both,just as following: *dnssec-signzone -o

Signing with the KSK and ZSK

2009-12-07 Thread xu dong
Hi folks, i have a question about signing zone files with the ksk and the zsk, as i know,when signing the zone files i have to use the ksk and zsk both,just as following: *dnssec-signzone -o domain-name -t -k KSK zone-name ZSK* but i want to sign the ZSK with KSK first,and then sign the zone