產生DNSKEY
ZSK
dnssec-keygen -r /dev/urandom -a RSASHA1 -b 1024 -n ZONE domain.name
KSK
dnssec-keygen -r /dev/urandom -f KSK -a RSASHA1 -b 2048 -n ZONE domain.name
檔案名稱格式
產生DNSKEY
ZSK
dnssec-keygen -r /dev/urandom -a RSASHA1 -b 1024 -n ZONE domain.name
KSK
dnssec-keygen -r /dev/urandom -f KSK -a RSASHA1 -b 2048 -n ZONE domain.name
檔案名稱格式
dig @a.root-servers.net. ns > named.ca
以此指令取得最新的 root dns資訊