Re: Full automatic DNSSEC for hosted zones/domains

2020-04-08 Thread Matthijs Mekking
Hi Philippe, On 4/7/20 3:46 PM, Philippe Maechler wrote: > Hello bind users > >> The answer is almost, as long as the zone has a DNSSEC policy configured: >> >> zone "newdomain.de" { >> type master; >> file "../master/newdomain.de"; >> dnssec-policy default; >> } >> >> The only thing not

Re: Full automatic DNSSEC for hosted zones/domains

2020-04-07 Thread Matthias Fechner
Am 07.04.2020 um 10:55 schrieb Matthias Fechner: > After bind was reloaded/restarted, it automatically creates the required > keys and fully maintain the zone, do key rollover, everything required > fully by itself? I got a private email pointing my to some webinars explaining the dnssec. I found

RE: Full automatic DNSSEC for hosted zones/domains

2020-04-07 Thread Philippe Maechler
Hello bind users > The answer is almost, as long as the zone has a DNSSEC policy configured: > > zone "newdomain.de" { > type master; > file "../master/newdomain.de"; > dnssec-policy default; > } > > The only thing not yet fully automated is submitting the DS to the > parent. You can do

Re: Full automatic DNSSEC for hosted zones/domains

2020-04-07 Thread Matthijs Mekking
Hi Matthias, The answer is almost, as long as the zone has a DNSSEC policy configured: zone "newdomain.de" { type master; file "../master/newdomain.de"; dnssec-policy default; } The only thing not yet fully automated is submitting the DS to the parent. You can do that as soon as named