generate_zone_keys.sh 315 B

123456789
  1. #!/bin/sh
  2. # From https://emanuelduss.ch/2014/09/dns-zonen-mit-dnssec-signieren/
  3. # 1. Generate a DNSSEC key signing key
  4. dnssec-keygen -3 -a RSASHA512 -b 4096 -r /dev/urandom -n ZONE -f KSK slurm.ch
  5. # 2. Generate a DNSSEC zone signing key
  6. dnssec-keygen -3 -a NSEC3RSASHA1 -b 2048 -r /dev/urandom -n ZONE slurm.ch