Dnssec bind9

Grundkonfiguration

• cat /etc/bind/named.conf.options

options {
	directory "/var/cache/bind";
        key-directory "/var/bind/keys";
	dnssec-validation auto;
};

Verzeichnis erstellen

• mkdir -p /etc/bind/keys/
• chown -R bind:bind /etc/bind/keys/

Key Signing Key (KSK) generieren

• cd /etc/bind/keys/