Package opendnssec

DNSSEC key and zone management software

http://www.opendnssec.org/

OpenDNSSEC was created as an open-source turn-key solution for DNSSEC.
It secures zone data just before it is published in an authoritative
name server. It requires a PKCS#11 crypto module library, such as softhsm

General Commands (Section 1)
ods-hsmspeed
The ods-hsmspeed utility is part of OpenDNSSEC and can be used to test the performance of the configured HSMs. The components of OpenDNSSEC do not talk directly...
ods-hsmutil
The ods-hsmutil utility is mainly used for debugging or testing. It is designed to interact directly with your HSM and can be used to manually list, create or...
ods-kaspcheck
The OpenDNSSEC XML configuration files (conf.xml and kasp.xml) offer the user many options to configure the OpenDNSSEC signing system. Some syntactic...
ods-ksmutil
ods-ksmutil manages the operation of the KASP Enforcer, which is the part of OpenDNSSEC that triggers key generation and signing operations on domains based on...
File Formats (Section 5)
ods-timing
The configuration files of OpenDNSSEC need to have timing descriptions, notably for periods. These descriptions follow ISO 8601 with exceptions for the duration...
Miscellanea (Section 7)
opendnssec
OpenDNSSEC is a complete DNSSEC zone signing system which maintains stability and security of signed domains. DNSSEC adds many cryptographic concerns to DNS...
System Administration (Section 8)
ods-control
ods-control is a helper utility which gives a combined interface for different command utilities within OpenDNSSEC. It can also start and stop OpenDNSSEC by...
ods-enforcerd
ods-enforcerd is part of the OpenDNSSEC software. It will enforce any policies that you have set up for zones under the control of OpenDNSSEC (including the...
ods-getconf
ods-getconf is part of the OpenDNSSEC software. With this tool, you can extract the value of a configuration option by giving the appropriate expression. For...
ods-signer
ods-signer is part of the OpenDNSSEC software. With this tool, you can send commands to the signer engine daemon. For more information, go to...
ods-signerd
ods-signerd is part of the OpenDNSSEC software. It will keep your DNS zones continuous signed. For more information, go to http://www.opendnssec.org and visit...