opendev/system-config
Code Issues Proposed changes

docs: add info on generating DS records

Browse Source 
Change-Id: Ie826e2c7b099d4dec5b778b1267f7b5c5a0a6bba
This commit is contained in:
James E. Blair 2018-11-21 09:51:20 -08:00
parent ec9d3b0834
commit d9b6be5bad
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
doc/source/dns.rst
View File

@ -37,4 +37,10 @@ Run::
And add the resulting files to the `dnssec_keys` key in the And add the resulting files to the `dnssec_keys` key in the
`group/adns.yaml` private hiera file on puppetmaster. `group/adns.yaml` private hiera file on puppetmaster.
If you need to generate DS records for the registrar, identify which
of the just-created key files is the key-signing key (examine the
contents of the files and read the comments therein). Then run::
dnssec-dsfromkey -2 $KEYFILE
.. note:: This section will be expanded. .. note:: This section will be expanded.