[Opendnssec-develop] Feedback on newbie install.
Rickard Bondesson
rickard.bondesson at iis.se
Mon Jun 29 10:36:10 UTC 2009
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
> cd softHSM; ln -s ../m4 m4; cd ..
>
> cd libhsm; ln -s ../m4 m4; cd ..
>
> cd libksm; ln -s ../m4 m4; cd ..
>
> cd enforcer; ln -s ../m4 m4; cd ..
>
> cd signer; ln -s ../m4 m4;cd ..
Will have a look at this. These directories should exist.
> Is there another guide on configuring the signer engine?
There are currently no guides becides the .rnc files for each xml file.
> I have initialised the softHSM. The zonefile.xml.sample
> refers to a SignerConfiguration file at
> /var/opendnssec/signconf/example.com.xml which does not
> exist. Any idea where I can find this file?
This file should be generated by the communicated when it is running. Signconf is just if you want to run Signer Engine without the KASP Enforcer.
*******************************
How to start everything:
# Edit conf.xml
Add paths, fix time, and repo.
# Edit kasp.xml
# Edit zonelist.xml
# Create and load the kasp
kaspimport -f /home/rickard/opendnssec/enforcer.db -i
# Start Signer Engine
signer_engine
# Start keygend
keygend -u rickard -d -P /home/rickard/opendnssec/keygend.pid &
# Start communicator
communicated -u rickard -d -P /home/rickard/opendnssec/communicated.pid &
# Stop Signer Engine
signer_engine_cli stop
(ps waux | grep Engine)
# Stop keygend
sudo killall -9 keygend
# Stop communicated
sudo killall -9 communicated
*******************************
// Rickard
-----BEGIN PGP SIGNATURE-----
Version: 9.8.3 (Build 4028)
Charset: utf-8
wsBVAwUBSkiZGuCjgaNTdVjaAQir5Af+PpZ0XhF3IpZIpOAUqkcjzATjpqrIIph0
dwx9sdf7Ia880HOz2NIyrMlcjIiTbcpQQAnBNKhSAW1B6P9Vr1z8SGvBeu+whK0h
hmXzTO+iW2svljqzsllSopAMnNTyCU6z1KYirCUo7br54YEGXMDv+iA417SgRG4R
3SMEvpMf0fQz23YUpWJdDjtiQHve+gqVuYETe8VEGNVCRqYk1TI4FJkAGzTtcVnu
VhK3PxK+SAqKomhaGJ2wfEFSJQXXHOybyC985cLBlMl8M46yaolyY1rLI5YPV9r8
jqFjuwlkv0HL5/bu5u/6eYf/90dIBI974dcLv1W5ywwGYmGKYsREYg==
=+87s
-----END PGP SIGNATURE-----
More information about the Opendnssec-develop
mailing list