[Opendnssec-develop] Feedback on newbie install.

Rickard Bondesson rickard.bondesson at iis.se
Mon Jun 29 10:36:10 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

> cd softHSM; ln -s ../m4 m4; cd ..
> 
> cd libhsm; ln -s ../m4 m4; cd ..
> 
> cd libksm; ln -s ../m4 m4; cd ..
> 
> cd enforcer; ln -s ../m4 m4; cd ..
> 
> cd signer; ln -s ../m4 m4;cd ..

Will have a look at this. These directories should exist.

> Is there another guide on configuring the signer engine?  

There are currently no guides becides the .rnc files for each xml file.

> I have initialised the softHSM.  The zonefile.xml.sample 
> refers to a SignerConfiguration file at 
> /var/opendnssec/signconf/example.com.xml which does not 
> exist.  Any idea where I can find this file?

This file should be generated by the communicated when it is running. Signconf is just if you want to run Signer Engine without the KASP Enforcer.

*******************************

How to start everything:

# Edit conf.xml
Add paths, fix time, and repo.

# Edit kasp.xml

# Edit zonelist.xml

# Create and load the kasp

kaspimport -f /home/rickard/opendnssec/enforcer.db -i

# Start Signer Engine

signer_engine

# Start keygend

keygend -u rickard -d -P /home/rickard/opendnssec/keygend.pid &

# Start communicator

communicated -u rickard -d -P /home/rickard/opendnssec/communicated.pid &

# Stop Signer Engine

signer_engine_cli stop
(ps waux | grep Engine)

# Stop keygend

sudo killall -9 keygend

# Stop communicated

sudo killall -9 communicated

*******************************

// Rickard
-----BEGIN PGP SIGNATURE-----
Version: 9.8.3 (Build 4028)
Charset: utf-8

wsBVAwUBSkiZGuCjgaNTdVjaAQir5Af+PpZ0XhF3IpZIpOAUqkcjzATjpqrIIph0
dwx9sdf7Ia880HOz2NIyrMlcjIiTbcpQQAnBNKhSAW1B6P9Vr1z8SGvBeu+whK0h
hmXzTO+iW2svljqzsllSopAMnNTyCU6z1KYirCUo7br54YEGXMDv+iA417SgRG4R
3SMEvpMf0fQz23YUpWJdDjtiQHve+gqVuYETe8VEGNVCRqYk1TI4FJkAGzTtcVnu
VhK3PxK+SAqKomhaGJ2wfEFSJQXXHOybyC985cLBlMl8M46yaolyY1rLI5YPV9r8
jqFjuwlkv0HL5/bu5u/6eYf/90dIBI974dcLv1W5ywwGYmGKYsREYg==
=+87s
-----END PGP SIGNATURE-----



More information about the Opendnssec-develop mailing list