search

niclabs / dns-tools

DNS tools for zone signature (file, pkcs11-hsm) and validation, and zone digest (ZONEMD)
MIT License
16 stars 4 forks source link

Using separate keys for each zone #23

Closed huguei closed 3 years ago

huguei commented 3 years ago

Hi. I have the tool running using libdtc as HSM. I can sign zones without problem. But it uses the same key pair ZSK and KSK. How can I generate a new key pair for each zone? I tried modifying the dns-tools.config by defining a different key-label for each zone, but it ignores it and insists on using the original ones it generated. Thanks.

huguei commented 3 years ago

It was an error with the filename of the config. Changed to dns-tools-config.json and now it works. Thanks.