29.03.2016 Views

Hands-on DNSSEC with DNSViz

1LXLQe2

1LXLQe2

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Change KSK for example.com Z<strong>on</strong>e (9.12 – 9.14)<br />

• Sign <strong>with</strong> <strong>on</strong>ly the sec<strong>on</strong>d KSK:<br />

# dnssec-signz<strong>on</strong>e -x -r /dev/urandom \<br />

-k $NEWKSK -o example.com db.example.com $ZSK<br />

• Reload z<strong>on</strong>e<br />

# service bind9 reload<br />

$ ./dnsviz_analyze example.com<br />

$ firefox example.com.html &<br />

$ dig +noall +comment +ad example.com<br />

Verisign Public<br />

85

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!