Re: Signing with the KSK and ZSK

2009-12-08 Thread Mark Andrews
In message <2ac8e9ad0912072303u6327b50eoc06cbfe232632...@mail.gmail.com>, xu dong writes: > > Hi folks, i have a question about signing zone files with the ksk and the > zsk, as i know,when signing the zone files i have to use the ksk and zsk > both,just as following: > > *dnssec-signzone -o do

Re: Signing with the KSK and ZSK

2009-12-08 Thread Chris Buxton
On Dec 8, 2009, at 2:03 AM, xu dong wrote: > Hi folks, i have a question about signing zone files with the ksk and the > zsk, as i know,when signing the zone files i have to use the ksk and zsk > both,just as following: > > dnssec-signzone -o domain-name -t -k KSK zone-name ZSK > but i want to

Signing with the KSK and ZSK

2009-12-07 Thread xu dong
Hi folks, i have a question about signing zone files with the ksk and the zsk, as i know,when signing the zone files i have to use the ksk and zsk both,just as following: *dnssec-signzone -o domain-name -t -k KSK zone-name ZSK* but i want to sign the ZSK with KSK first,and then sign the zone files