search

dnsimple / erldns

DNS server, in Erlang.
MIT License
398 stars 98 forks source link

how to DNSSEC #109

Closed dch closed 4 years ago

dch commented 4 years ago

The src for erldns and dns_erlang seem to suggest that DNSSEC support is possible, but t's not clear exactly how one sets up a zone to do this, including using/generating/rolling the various keys, getting RRSIG records generated etc. If you have a short example I'm happy to extend docs and tests accordingly.

aeden commented 4 years ago

Take a look at https://github.com/dnsimple/erldns/blob/master/priv/test.zones.json, specifically the minimal-dnssec.com zone. The configuration shows the use of "keys" to specify the keys used to sign the zone.