jschlyter / zkt Goto Github PK

#
#	README  dnssec zone key tool
#
#	(c) March 2005 - Aug 2014 by  Holger Zuleger  hznet
#	(c) domaincmp() Aug 2005 by Karle Boss & H. Zuleger (kaho)
#	(c) zconf.c by Jeroen Masar & Holger Zuleger
#

For more information about the DNSSEC Zone Key Tool please
have a look at "http://www.hznet.de/dns/zkt/"

You can also subscribe to the [email protected] mailing list
on the following website: https://lists.sourceforge.net/lists/listinfo/zkt-users

The ZKT software is licenced under BSD (see LICENCE file)

To build the software:
a) Get the current version of zkt
	$ wget http://www.hznet.de/dns/zkt/zkt-1.1.tar.gz

b) Unpack
	$ tar xzvf zkt-1.1.tar.gz

c) Change to source directory
	$ cd zkt-1.1

d) Run configure script
	$ ./configure

e) Compile
	$ make

f) Install
	# make install
	# make install-man


Prepare your setup:
a) (optional) Install or rebuild the default dnssec.conf file 
	$ zkt-conf -d -w	# Install new file
		or
	$ zkt-conf -s -w	# rebuild existing file

b) (optional) Change default parameters
	$ zkt-conf -s -O "Zonedir: /var/named/zones" -w
		or use your prefered editor 
	$ vi /var/named/dnssec.conf
   (optional) You'll probably want to have zkt-ls work recursively
	$ zkt-conf -s -O "Recursive: True" -w

c) Prepare one of your zone for zkt
	$ cd /var/named/zones/net/example.net	# change dir to zone directory
	$ cp <zonefile> zone.db 		# copy and rename existing zone file to "zone.db"
	$ zkt-conf -w zone.db			# create local dnssec.conf file and include dnskey.db into zone file 

d) Prepare for initial signing
	$ cd /var/named/zones/net/example.net
	$ touch zone.db.signed
	$ zkt-signer -v -v -o example.net	# -o is ORIGIN (i.e. zone name)

e) Publish your zone
	@ add `zone.db.signed' as zone file to your name server
	@ publish DS contained in `dsset-example.net.' at your zone's parent