[Opendnssec-develop] HSM review/howto

Rick van Rein rick at openfortress.nl
Mon Mar 23 10:16:14 UTC 2009


Hi,

> The  
> big problem I found with most of them is [...]
> the lack of basic utilities such as a key generator.

This is probably because applications usually have their own formatting
issues with the keys being used; attributes are usually set in a way
that suits the app.  So, applications generate their own keys.

> So, I think a how-to is a very good idea.

Certainly.

> In my experience the quality of the docs, demos and utilities varies  
> greatly between the manufacturers listed above and makes all the  
> difference when using an HSM.

Good point.


Cheers,
 -Rick



More information about the Opendnssec-develop mailing list