…
# # README dnssec zone key tool # # (c) March 2005 - Aug 2014 by Holger Zuleger hznet # (c) domaincmp() Aug 2005 by Karle Boss & H. Zuleger (kaho) # (c) zconf.c by Jeroen Masar & Holger Zuleger # For more information about the DNSSEC Zone Key Tool please have a look at "http://www.hznet.de/dns/zkt/" You can also subscribe to the zkt-users@sourceforge.net mailing list on the following website: https://lists.sourceforge.net/lists/listinfo/zkt-users The ZKT software is licenced under BSD (see LICENCE file) To build the software: a) Get the current version of zkt $ wget http://www.hznet.de/dns/zkt/zkt-1.1.tar.gz b) Unpack $ tar xzvf zkt-1.1.tar.gz c) Change to source directory $ cd zkt-1.1 d) Run configure script $ ./configure e) Compile $ make f) Install # make install # make install-man Prepare your setup: a) (optional) Install or rebuild the default dnssec.conf file $ zkt-conf -d -w # Install new file or $ zkt-conf -s -w # rebuild existing file b) (optional) Change default parameters $ zkt-conf -s -O "Zonedir: /var/named/zones" -w or use your prefered editor $ vi /var/named/dnssec.conf (optional) You'll probably want to have zkt-ls work recursively $ zkt-conf -s -O "Recursive: True" -w c) Prepare one of your zone for zkt $ cd /var/named/zones/net/example.net # change dir to zone directory $ cp <zonefile> zone.db # copy and rename existing zone file to "zone.db" $ zkt-conf -w zone.db # create local dnssec.conf file and include dnskey.db into zone file d) Prepare for initial signing $ cd /var/named/zones/net/example.net $ touch zone.db.signed $ zkt-signer -v -v -o example.net # -o is ORIGIN (i.e. zone name) e) Publish your zone @ add `zone.db.signed' as zone file to your name server @ publish DS contained in `dsset-example.net.' at your zone's parent