dns/master: Adapted generate-keys to inline-signing (only gen KSK)
parent
be6303576a
commit
a41f4c1c3f
@ -1,26 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
# TODO Change to makefile call
|
|
||||||
|
|
||||||
- name: Generate key signing key for zone {{ domain }}
|
|
||||||
command: >-
|
|
||||||
dnssec-keygen
|
|
||||||
-f KSK
|
|
||||||
-3
|
|
||||||
-a {{ dnssec_algorithm | quote }}
|
|
||||||
-b {{ dnssec_key_length | quote }}
|
|
||||||
-n ZONE {{ domain | quote }}
|
|
||||||
args:
|
|
||||||
chdir: "{{ keys_directory }}"
|
|
||||||
|
|
||||||
- name: Generate zone signing key for zone {{ domain }}
|
|
||||||
command: >-
|
|
||||||
dnssec-keygen
|
|
||||||
-3
|
|
||||||
-a {{ dnssec_algorithm | quote }}
|
|
||||||
-b {{ dnssec_key_length | quote }}
|
|
||||||
-n ZONE {{ domain | quote }}
|
|
||||||
args:
|
|
||||||
chdir: "{{ keys_directory }}"
|
|
||||||
|
|
||||||
# TODO Copy public ZSK to localhost
|
|
Loading…
Reference in New Issue