Skip to content

Commit

Permalink
Minor fixes in README file
Browse files Browse the repository at this point in the history
  • Loading branch information
hzuleger committed Jul 17, 2015
1 parent ddd3d39 commit 5ae4d89
Showing 1 changed file with 29 additions and 18 deletions.
47 changes: 29 additions & 18 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,9 +3,9 @@ ZKT -- Zone Key Tool

A dnssec zone and key management toolset

(c) March 2005 - Aug 2014 by Holger Zuleger hznet
(c) domaincmp() Aug 2005 by Karle Boss & H. Zuleger (kaho)
(c) zconf.c by Jeroen Masar & Holger Zuleger
(c) March 2005 - Aug 2014 by Holger Zuleger hznet
(c) domaincmp() Aug 2005 by Karle Boss & H. Zuleger (kaho)
(c) zconf.c by Jeroen Masar & Holger Zuleger

For more information about the DNSSEC Zone Key Tool please
have a look at "http://www.zonekeytool.de/"
Expand All @@ -28,6 +28,7 @@ or can get the latest version on github
$ git clone https://github.com/hzuleger/ZKT/

Unpack

$ tar xzvf zkt-1.3.tar.gz
$ cd zkt-1.3

Expand All @@ -49,25 +50,28 @@ Configure ZKT with configure options..
--enable-configpath=PATH
--disable-tree use single linked list instead of binary tree data

... and start run it
... and run it

$ ./configure

Compile and install the binaries

$ make
$ sudo make install
# sudo make install-man

## Configure and setup ZKT

1. Install or rebuild the default dnssec.conf file
### Install or rebuild the default dnssec.conf file

$ zkt-conf -d -w # Install new file
or
or
$ zkt-conf -s -w # rebuild existing file

The configuration file is named "/var/named/dnssec.conf" by default

2. (optional) Change the default parameters
### Change the default parameters

To change the paremeters in the config file you can use a simple text
editor, or use the zkt-conf command

Expand All @@ -76,29 +80,36 @@ The configuration file is named "/var/named/dnssec.conf" by default
or use your prefered editor
$ vi /var/named/dnssec.conf

3. Prepare one of your zone for zkt
### Prepare one of your zone for zkt

* Change to the zone directory

* Change to the zone directory
$ cd /var/named/zones/net/example.net
* Copy and rename the existing zone file to `zone.db`

* Copy and rename the existing zone file to `zone.db`

$ cp <zonefile> zone.db
* Create a local `dnssec.conf` file and include `dnskey.db` into the zone file

* Create a local `dnssec.conf` file and include `dnskey.db` into the zone file

$ zkt-conf -w zone.db

4. Prepare for initial signing
### Prepare for initial signing

$ cd /var/named/zones/net/example.net
$ touch zone.db.signed
$ zkt-signer -v -v -o example.net # -o is ORIGIN (i.e. zone name)

5. Publish your zone
You have to change your named zone configuration to use `zone.db.signed` as master
zone file.
Then force a reload of the zones
### Publish your zone

You have to change your named zone configuration to use `zone.db.signed` as master
zone file.
Then force a reload of the zones

$ rndc reload example.net
or
$ zkt-signer -f -r -v -v

Don't forget to send your DS Record to the parent.
You will find the DS record in the file `dsset-example.net.`.
Don't forget to send your DS Record to the parent.
You will find the DS record in the file `dsset-example.net.`.

0 comments on commit 5ae4d89

Please sign in to comment.