ZKT Free tool to manage keys and signatures for DNSSEC-zones
Download

ZKT Ranking & Summary

ZKT Tags

manage create sign dnssec key manager create dnssec key sign dnssec key

ZKT Description

Free tool to manage keys and signatures for DNSSEC-zones ZKT (Zone Key Tool) is a toolkit written in C for DNSSEC zone and key management. It supports automatic zone resigning and KSK- and ZSK rollover according to RFC4641 and RFC5011. The Zone Key Tool consist of two commands:· dnssec-zkt to create and list dnssec zone keys and· dnssec-signer to sign a zone and manage the lifetime of the zone signing keysBoth commands are simple wrapper commands around the dnssec-signzone(8) and dnssec-keygen(8) commands provided by BIND 9.3/9.4/9.5.They are designed to solve some (especially my) problems in maintaining a few dnssec aware zones.NOTE: The dnssec-zkt command is not primary designed for environments with many secure zones. However, some tests with round about 12000 zones, stored in a two level directory structure (zonedir//) shows that this could be a working scenario. What's New in This Release: · Licence changed to BSD; · Compressed tar file; · Use of configure for compile time config settings; · Automated KSK rollover.

ZKT Related Software