Klaus Darilion <[email protected]> wrote: > > A signed zone shall be moved to another DNS provider. Hence I want to > add the public KSK of the gaining DNS provider as additional DNSKEY to > the zone.
I guess you might already have seen this draft - it discusses long-term multi-provider setups rather than transitional ones, so it isn't direcly on point, but it still has some useful ideas. https://tools.ietf.org/html/draft-ietf-dnsop-multi-provider-dnssec > So, how is the correct process to add an additional DNSKEY (only the public > key is known). I think you are looking for `dnssec-importkey`. Tony. -- f.anthony.n.finch <[email protected]> http://dotat.at/ Viking, North Utsire, South Utsire, Northeast Forties: Northwesterly 4 to 6, becoming variable 2 to 4 except in South Utsire. Slight or moderate. Showers. Good. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
