29.03.2016 Views

Hands-on DNSSEC with DNSViz

1LXLQe2

1LXLQe2

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Add New KSK to example.com Z<strong>on</strong>e (9.9 – 9.11)<br />

• Re-sign z<strong>on</strong>e <strong>with</strong> two KSKs:<br />

# dnssec-signz<strong>on</strong>e -x -r /dev/urandom \<br />

-k $KSK -k $NEWKSK -o example.com db.example.com $ZSK<br />

• Reload z<strong>on</strong>e<br />

# service bind9 reload<br />

$ ./dnsviz_analyze example.com<br />

$ firefox example.com.html &<br />

$ dig +noall +comment +ad example.com<br />

Verisign Public<br />

82

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!