X-Git-Url: https://git.svenne.dk/?p=public%2Fmicrodnssec.git;a=blobdiff_plain;f=readme.txt;fp=readme.txt;h=ebee0cbe2c697f824aef7c2592e1d99396c4879f;hp=0000000000000000000000000000000000000000;hb=a14da3a4bb6fc816db0b9db9ec7089eb7cc1387d;hpb=0f92094dd6ce5e8ed75e8671aff75cf1c353150f diff --git a/readme.txt b/readme.txt new file mode 100644 index 0000000..ebee0cb --- /dev/null +++ b/readme.txt @@ -0,0 +1,28 @@ +microdnssec, (c) Svenne Krap, 2010 +released under 2-clause BSD-license + +Before use there are multiple things you need to do: +1) have one or more servers running bind (9.6.x) you can ssh into +2) set up this bind to include an autogenerated file (seczone.conf for example) +3) configure microdnssec in conf/settings (start out with a copy from +conf/settings.sample) + +Workflow - new domains: +- prepare-zone.sh + (i.e. prepare-zone example.com dns@example.com ) +- edit-zone.sh +- sign-zone.sh +- update-zone-conf.sh + +Work-flow resign : +- refresh-signatures.sh + +Work-flow key-roll-over +- make-{z,k}sk.sh +- sign-all.sh +> pass DS-record upstream, if needed +- list-keys.sh +> find the correct key to expire +- retire-key.sh (copy/paste key from list-keys output) +> wait til all signatures from the old key has expired +- purge-retired-keys.sh