User Tools

Site Tools


dnssec

Skirtumai

Čia matote skirtumus tarp pasirinktos versijos ir esamo dokumento.

Link to this comparison view

Next revision
Previous revision
dnssec [2014/06/30 13:41]
dalius sukurtas
dnssec [2014/08/05 13:46] (esamas)
Linija 1: Linija 1:
 +<​code>​
 dnssec-keygen -a NSEC3RSASHA1 -b 2048 -n ZONE example.com dnssec-keygen -a NSEC3RSASHA1 -b 2048 -n ZONE example.com
 dnssec-keygen -f KSK -a NSEC3RSASHA1 -b 4096 -n ZONE example.com dnssec-keygen -f KSK -a NSEC3RSASHA1 -b 4096 -n ZONE example.com
Linija 6: Linija 7:
 echo "​\$INCLUDE $key">>​ example.com.zone echo "​\$INCLUDE $key">>​ example.com.zone
 done done
 + 
  
 dnssec-signzone -3 <​salt>​ -A -N INCREMENT -o <​zonename>​ -t <​zonefilename>​ dnssec-signzone -3 <​salt>​ -A -N INCREMENT -o <​zonename>​ -t <​zonefilename>​
 dnssec-signzone -A -3 $(head -c 1000 /dev/random | sha1sum | cut -b 1-16) -N INCREMENT -o example.com -t example.com.zone dnssec-signzone -A -3 $(head -c 1000 /dev/random | sha1sum | cut -b 1-16) -N INCREMENT -o example.com -t example.com.zone
 +
 +TLSA $ openssl x509 -noout -fingerprint -sha256 < /​path/​to/​your/​certificate/​file | tr -d :
 +
 +https://​www.huque.com/​bin/​gen_tlsa
 +</​code>​
dnssec.1404124914.txt.gz · Keista: 2014/08/05 13:46 (redaguoti papildomomis priemonėmis)