Revision [2535]
This is an old revision of dnssecroot made by JulianDemarchi on 2011-07-28 12:18:45.
Purpose
Sign the OpenNIC root zoneTasks
- Modify the makeroot.sh script to output DNSSEC into the root zone
- Modify the makeroot.sh script to suck in DS records for OpenNIC TLDs
- Modify the makeroot.sh script to sign the root zone
- Create the ZSK and KSK OpenNIC keys
- Create a maintenance policy for key refreshing(key-rolling policy)
- Create a method to sync DS keys in a secure way