Re: [Pdns-users] Random (was: When to do a key rollover?)

2011-05-11 Thread bert hubert
On Wed, May 11, 2011 at 08:19:01PM +0200, Posner, Sebastian wrote: Otherwise, create a fresh and immediately active key If the active ZSK will expire soon, create a spare key These last two lines implicate another question: Is there any possibility to influence the source of random

Re: [Pdns-users] Random (was: When to do a key rollover?)

2011-05-11 Thread Posner, Sebastian
bert hubert wrote: Perhaps a question for everybody.. How do make yure you have enough *good* random for (frequent) key generation for (many) different zones? I've heard good things about http://www.entropykey.co.uk/ . This is a sort of halfway solution - I'd not suggest just using