Confirmed users
308
edits
Security/DNSSEC-TLS-nginx: Difference between revisions
Jump to navigation
Jump to search
no edit summary
No edit summary |
No edit summary |
||
| Line 5: | Line 5: | ||
# Install and set up bind9: | # Install and set up bind9: | ||
## 'apt-get install bind' or bind9 or something | ## 'apt-get install bind' or bind9 or something | ||
## Set up keys and zone files | ## Set up keys and zone files (see [https://www.dnssec-tools.org/wiki/index.php/Sign_Your_Zone here]) | ||
## Make a self-signed certificate | ## Make a self-signed certificate | ||
## Make a TLSA record using [http://hg.mozilla.org/users/dkeeler_mozilla.com/dnssec-tls/file/tip/cert2dane.sh cert2tlsa.sh] (and put this in your zone file) | ## Make a TLSA record using [http://hg.mozilla.org/users/dkeeler_mozilla.com/dnssec-tls/file/tip/cert2dane.sh cert2tlsa.sh] (and put this in your zone file) | ||