On 10/03/2013 10:25 AM, Havard Eidnes wrote:
For some zones I have multiple views with different content.
How can I configure this in OpenDNSSec in combination with SoftHSM?
My opinion: I think you are stretching the DNS model too far by
trying to do this.
What do you mean by this? Creating views in DNS ?
But ... if you really want the associated pain, I suspect you
will have to operate with two different OpenDNSSEC instances, one
signing the public version, one signing the "other (internal?)
view".
You do of course need to ensure that any validating resolvers are
not exposed to a mixed world view, picking up data from both of
the two distinct views.
This is a problem that is outside of the scope of DNSSEC.
When you are playing with views you always have to make
sure that you don't mix things up.
Jan Hugo
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
