Hi Christian, There is no configuration for a custom NSEC3 salt value in Knot DNS. So far there was no need for that. Is it important for you?
Best, Daniel On 11/12/18 3:33 PM, Christian Petrasch wrote: > Hi, > > is there any knot-dns configuration parameter to define the SALT string for > NSEC3 ? > I have : > > nsec3: BOOL > nsec3-iterations: INT > nsec3-opt-out: BOOL > nsec3-salt-length: INT > > but nothing to configure the string.. > > Does anybody has an idea ? > > Any help would be really appreciated.. > > thanks a lot > > best regards > -- > Christian Petrasch > Product Owner > Zone Creation & Signing > IT-Services > > DENIC eG > Kaiserstraße 75-77 > 60329 Frankfurt am Main > GERMANY > > E-Mail: [email protected] > http://www.denic.de <http://www.denic.de/> > > PGP-KeyID: 549BE0AE, Fingerprint: 0E0B 6CBE 5D8C B82B 0B49 DE61 870E 8841 > 549B E0AE > > Angaben nach § 25a Absatz 1 GenG: DENIC eG (Sitz: Frankfurt am Main) > Vorstand: Helga Krüger, Martin Küchenthal, Andreas Musielak, Dr. Jörg > Schweiger > Vorsitzender des Aufsichtsrats: Thomas Keller > Eingetragen unter Nr. 770 im Genossenschaftsregister, Amtsgericht Frankfurt > am Main > -- https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
