May 12 – 13, 2019
Shangri-La Bangkok
Asia/Bangkok timezone

Signing with offline KSK in Knot DNS 2.8

May 12, 2019, 3:00 PM
30m
Ballroom 1 (Shangri-La Bangkok)

Ballroom 1

Shangri-La Bangkok

89 ซอย Wat Suan Plu - Dumex, Khwaeng Bang Rak, Khet Bang Rak, Krung Thep Maha Nakhon 10500, Thailand
Standard Presentation Public Workshop

Speaker

Mr Jaromír Talíř (CZ.NIC)

Description

CZ.NIC's DNSSEC operations involve signing with offline KSK. This has been traditionally managed by a set of shell scripts. DNS administrators for .CZ together with KnotDNS developers joined together to design and implement this functionality into the KnotDNS DNSSEC signer. This feature was released in KnotDNS 2.8. This presentation describes the feature in the context of current operations in .CZ.

Talk Duration 30 Minutes

Primary author

Mr Jaromír Talíř (CZ.NIC)

Presentation materials