May 12 – 13, 2019
Shangri-La Bangkok
Asia/Bangkok timezone

Signing with offline KSK in Knot DNS 2.8

May 12, 2019, 3:00 PM
Ballroom 1 (Shangri-La Bangkok)

Ballroom 1

Shangri-La Bangkok

89 ซอย Wat Suan Plu - Dumex, Khwaeng Bang Rak, Khet Bang Rak, Krung Thep Maha Nakhon 10500, Thailand
Standard Presentation Public Workshop


Mr Jaromír Talíř (CZ.NIC)


CZ.NIC's DNSSEC operations involve signing with offline KSK. This has been traditionally managed by a set of shell scripts. DNS administrators for .CZ together with KnotDNS developers joined together to design and implement this functionality into the KnotDNS DNSSEC signer. This feature was released in KnotDNS 2.8. This presentation describes the feature in the context of current operations in .CZ.

Talk Duration 30 Minutes

Primary author

Mr Jaromír Talíř (CZ.NIC)

Presentation materials