dns/master: Adapted generate-keys to inline-signing (only gen KSK)
parent
be6303576a
commit
a41f4c1c3f
@ -1,26 +0,0 @@
|
||||
---
|
||||
|
||||
# TODO Change to makefile call
|
||||
|
||||
- name: Generate key signing key for zone {{ domain }}
|
||||
command: >-
|
||||
dnssec-keygen
|
||||
-f KSK
|
||||
-3
|
||||
-a {{ dnssec_algorithm | quote }}
|
||||
-b {{ dnssec_key_length | quote }}
|
||||
-n ZONE {{ domain | quote }}
|
||||
args:
|
||||
chdir: "{{ keys_directory }}"
|
||||
|
||||
- name: Generate zone signing key for zone {{ domain }}
|
||||
command: >-
|
||||
dnssec-keygen
|
||||
-3
|
||||
-a {{ dnssec_algorithm | quote }}
|
||||
-b {{ dnssec_key_length | quote }}
|
||||
-n ZONE {{ domain | quote }}
|
||||
args:
|
||||
chdir: "{{ keys_directory }}"
|
||||
|
||||
# TODO Copy public ZSK to localhost
|
Loading…
Reference in New Issue