CODEWITHSUNDEEP
pythondnsdnspython
user869887
user869887

Reputation: 31

DNSSEC Sign RRSET using DNSPython

I'm trying to DNSSEC Sign a RRSET, however I am not able finding any references to how to do so using DNSPython. Yes it has dns.dnssec.validate_rrsig(), but I want to DNSSEC sign a rrset, how can this be done?

I've been pooring over the RFC's however I'm obviously lacking something in order to make it work.

Upvotes: 3

Views: 1006

Answers (1)

jman
jman

Reputation: 11596

Do you really have to do it with DNSPython? Is this a custom name server?

The typical way you normally do it (with bind, for example) is by pre-signing the zone file. The DNSSEC RRSIG does not have any dependency on the connection parameters so we don't really have to do on-the-fly signing. Also, things like NSEC would be easier to handle if you pre-sign.

Upvotes: 0

Related Questions