[Opendnssec-develop] How to migrate a signed zone to OpenDNSSEC

[Rickard Bellgrim]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi

I am writing some text on how to migrate a signed zone to OpenDNSSEC. I believe that there are three alternatives.

1. Export the keys
2. Prepublish DNSKEY record
3. Unsign and start fresh
(4. More alternative?)

Does anyone of you have a good description on how to do the prepublishing method? Where you start signing the zone on a new server. Take the DNSKEY records and put them in the old name server. Etc.

http://trac.opendnssec.org/wiki/Signer/Using/Migrating

Thanks
// Rickard

-----BEGIN PGP SIGNATURE-----
Version: 9.8.3 (Build 4028)
Charset: utf-8

wsBVAwUBSvrQoeCjgaNTdVjaAQjjlwf+KHL62SV8mSl89lxjKdrox/4vOmzMLsAH
hWEBp2P2mpKOBpDSDQt2ONDxPqGtSYb4PRy2VZTT3or0M3iMcgapGk9rxisMoveK
gTXQTGLIRaZrNhah+2D7lD9GL/lItMG4mO/WFIRaUN6D6N79IliVngbhBmHTuE2W
xXeTRV6WKlkybxQlIqkLYvF4L/baF2JHy1gQR27yjtPmmED7Zb9Q2cHdmUotXcV1
LZg+NBXw1xE/Y6jEpA31NxKDSTGcvEM0itTpYx2tR0dZr/4gwtQ39jVxrTDP+5Tl
q4SDGnQut13YoMgx/WkcS7A6bMHkEZkV9j57QVgAv2+MUJxWtJWRWg==
=GnNP
-----END PGP SIGNATURE-----


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20091111/2accb303/attachment.htm>