Script DNSSEC automation with OXXA

I do use Oxxa too, but I almost don't use dnssec yet, but that could change in the future.
Nice to already have a script available for that! Good job! (y)
 
Thanks. It ended up being a complete rewrite. I had to support multiple api credentials based on different resellers. And the ODR api is completely different. I’m almost there tho. When it’s completely finished i’ll share it.
 
The original post (and github link) is... I still use it daily. If you have any issues let me know
 
Hi Jordi

I am wondering why you are adding a ZSK (key type 256) into the registry.
Afaik, it is only needed to add the KSK (key type 257) into the parent (registry).
The ZSK can this way be changed without the need to do an update to the parent.

Kind regards
Dries Pattyn
 
Driesp said:
Hi Jordi

I am wondering why you are adding a ZSK (key type 256) into the registry.
Afaik, it is only needed to add the KSK (key type 257) into the parent (registry).
The ZSK can this way be changed without the need to do an update to the parent.

Kind regards
Dries Pattyn
Click to expand...
Hi Dries,

Thank you for your question. When i created this script i tested de records by oxxa and didn't get an verified result without setting him both. Reading on in the documentation learns me that your option should work. I will put it on my to do list to test en adjust ;)
 
You must log in or register to reply here.
Back
Top