[Opendnssec-user] Re: Contacts

[Rickard Bellgrim]

This list. The Trac at <http://trac.opendnssec.org/newticket>. You are
thinking of GOST? OpenDNS signs with ldns so you have to talk with
ldns people first.

The signing is done in the HSM. GOST was not part of PKCS#11, but it is now with version 2.30 of PKCS#11. Then you need an HSM that can talk version 2.30 and use GOST, upgrade OpenDNSSEC to use version 2.30 and implement code points for GOST. I think ldns has support for GOST.

SoftHSM v2 will be upgraded to PKCS#11 2.30 and support GOST. It can use both Botan and OpenSSL, and currently only OpenSSL and not Botan supports GOST.

// Rickard
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20100225/8ae0ae9a/attachment.htm>