On 4 mar 2015, at 19:00, Dr Eberhard W Lisse <[email protected]> wrote: > We can sign the cards on Centos and OS X and sign zones with a modified Bind9 > on Centos.
Out of curiosity, why would you need a "modified" bind9? I would expect a
standard bind9 to work now since native PKCS#11 was added.
FWIW, OpenDNSSEC has been able to sign zones using any OpenSC-supported smart
card for many years now.
jakob
