About RIPE NCC | Contact  | Search | Sitemap    
Homepage RIPE NCC  
Deployment of Internet Security Infrastructures
     
DISI:
RIPE NCC Navigation Ends
DISI Homepage DISI Home Page
DISI Documents DISI Documents
DISI Tools DISI Tools
DISI related projects and links DISI related projects
and links
RIPE NCC Navigation Ends
Next Section

NAME

    dnssigner - A dnssec zone signer that uses a Net::DNS::SEC::Maint keydatabase

SYNOPSIS

    dnssigner [options] zonefile

dnssigner [-v] [-o ] zonefile dnssigner -h|-? dnssigner -V

General Flags -h print this help message and exit -V print version information and exit -v increase verbosity

 zonefile         name of the zonefile.

 -o <origin>      origin of the zone. If not supplied the name of the zone 
                  will be used as origin.

 -t               print statistics of the signing process to stderr.

 -s               YYYYMMDDHHMMSS|+offset:
		  SIG start time - absolute|offset (now)

 -e               YYYYMMDDHHMMSS|+offset|\"now\"+offset]:
		  SIG end time  - absolute|from start|from now (now + 30 days)
 

DESCRIPTION

A signer using a Net::DNS::SEC::Maint keydatabase. Users can a separate tool to configure DNSSEC keys in the keydatabase. The dnssigner will use this database to include a KEYSET in the apex and sign the zone using an appropriate zone and keysinging keys.

CONFIGURATION

The signer needs access to the dnssecmaint configuration file. If the DNSSECMAINT_CONFFILE does not contain a full path to the configuration file the system will use the default location. (/usr/local/etc/dnssecmaint.conf)

The Net::DNS::SEC::Maint package commes with a utility called dnssecmaint-config that will assist you in generating a configuration file.

Features, bugs and TODO

The code is dependend on Net::DNS::SEC::Maint::Zone. See the TODO file in the distribution for more info.

This is code in development stage not ment for further distribution. Use at your own risk

COPYRIGHT

Copyright (c) 2001 RIPE NCC. Author Olaf M. Kolkman

All Rights Reserved

Permission to use, copy, modify, and distribute this software and its documentation for any purpose and without fee is hereby granted, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation, and that the name of the author not be used in advertising or publicity pertaining to distribution of the software without specific, written prior permission.

THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS; IN NO EVENT SHALL AUTHOR BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

SEE ALSO

Net::DNS::SEC::Maint::User, Net::DNS::SEC::Maint::Key, dnssec-signzone



 

Next Section
     About RIPE NCC | Service Announcements | Site Map | LIR Portal | About RIPE | Contact | © RIPE NCC. All rights reserved.
RIPE NCC Homepage Go to the RIPE NCC LIRPortal Go to the RIPE Community pages