User Tools
dnssec
Skirtumai
Čia matote skirtumus tarp pasirinktos versijos ir esamo dokumento.
| Next revision | Previous revision Next revision Both sides next revision | ||
|
dnssec [2014/06/30 13:41] dalius sukurtas |
dnssec [2014/07/01 10:19] dalius |
||
|---|---|---|---|
| Linija 1: | Linija 1: | ||
| + | <code> | ||
| dnssec-keygen -a NSEC3RSASHA1 -b 2048 -n ZONE example.com | dnssec-keygen -a NSEC3RSASHA1 -b 2048 -n ZONE example.com | ||
| dnssec-keygen -f KSK -a NSEC3RSASHA1 -b 4096 -n ZONE example.com | dnssec-keygen -f KSK -a NSEC3RSASHA1 -b 4096 -n ZONE example.com | ||
| Linija 6: | Linija 7: | ||
| echo "\$INCLUDE $key">> example.com.zone | echo "\$INCLUDE $key">> example.com.zone | ||
| done | done | ||
| + | |||
| dnssec-signzone -3 <salt> -A -N INCREMENT -o <zonename> -t <zonefilename> | dnssec-signzone -3 <salt> -A -N INCREMENT -o <zonename> -t <zonefilename> | ||
| dnssec-signzone -A -3 $(head -c 1000 /dev/random | sha1sum | cut -b 1-16) -N INCREMENT -o example.com -t example.com.zone | dnssec-signzone -A -3 $(head -c 1000 /dev/random | sha1sum | cut -b 1-16) -N INCREMENT -o example.com -t example.com.zone | ||
| + | |||
| + | TLSA $ openssl x509 -noout -fingerprint -sha256 < /path/to/your/certificate/file | tr -d : | ||
| + | </code> | ||
dnssec.txt · Keista: 2014/08/05 13:46 (redaguoti papildomomis priemonėmis)
