DNSSEC settings

by

Warning: NEVER do this on a live site if you have no experience with DNSSEC. A wrong setting will result in 2 days of downtime for both site , subdomains AND email!

IF

DS record equals

Keytag 1234
Algorithm ECDSA SHA-256 (13)
Digest Type SHA-256 (2)
Digest: A1A2B5

AND keydata equals

257 3 13 YmFzZTY0ZW5jb2RlLm9yZw==

Then set

flag = 257 KSK
protocol = 3
algorithm = 13
key = YmFzZTY0ZW5jb2RlLm9yZw==
Key tag = 1234

257 = KSK
256 = ZSK

Leave a Comment