Adding and Signing a Zone

OpenDNSSEC supports multiple ways to import and export zones. The most basic and straight forward way is the file backend. It will read an unsigned zone file, sign it and output a signed zone file.

1. You will now add a zone and sign it. OpenDNSSEC will search for unsigned zone files in /var/opendnssec/unsigned/ folder. Create the sample zone file test.com with the below details.

$ORIGIN test.com. 

$TTL 86400 

  test.com.    3600    IN      SOA     ns.test.com. username.test.com. 1 

86400 7200 2419200 300 test.com.            IN      NS      ns ns                      IN      A       172.23.0.10 

2. Add the zone test.com with the command below. This zone file will be fetched by OpenDNSSEC, keys will be generated, and zone will be signed according to the policy setup into the kasp.xml file.

# ods-enforcer zone add -z test.com 

Signing zone output

3. To display the Zone List, run the below command.

# ods-enforcer zone list 

List zone output

4. Use the command below to list the Zone keys.

# ods-enforcer key list 

List zone keys output