summaryrefslogtreecommitdiff
path: root/1-make-anchor.sh
diff options
context:
space:
mode:
Diffstat (limited to '1-make-anchor.sh')
-rwxr-xr-x1-make-anchor.sh9
1 files changed, 8 insertions, 1 deletions
diff --git a/1-make-anchor.sh b/1-make-anchor.sh
index 9140283..9d04655 100755
--- a/1-make-anchor.sh
+++ b/1-make-anchor.sh
@@ -1,5 +1,12 @@
#!/bin/bash
-dnssec-keygen -a ECDSA384 -b 2048 -n ZONE .
+cd work
+
+# Generate a key that will be used to sign the keys
+# In out scenatio this will be used as a trusted root
dnssec-keygen -f KSK -a ECDSA384 -b 4096 -n ZONE .
+cp *.key ../anchor.key
+dnssec-dsfromkey *.key > ../anchor.ds
+# Generate a key that will be used to sign records
+dnssec-keygen -a ECDSA384 -b 4096 -n ZONE . \ No newline at end of file