[Opendnssec-user] Final tests

[Rickard Bellgrim]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

> I'm not an expert in dns so I wonder if there are anything I should
> look
> for in the files or any tests I can do to be sure that it works correct
> and that the files are signed as they should?

We have the tool ods-auditor which verifies the zones (it uses dnsruby instead of ldns as a DNS library).

You could also load your signed zones into BIND or NSD, so that the zones are available on your internal network. Then you can try to validate your zone by using different tools like: http://opensource.iis.se/trac/dnscheck or configuring a local resolver with the public KSK.

// Rickard

-----BEGIN PGP SIGNATURE-----
Version: 9.8.3 (Build 4028)
Charset: utf-8

wsBVAwUBS1RO2+CjgaNTdVjaAQgjfQf+IoqIsK92tVW/8b4Dn+iOkHSktik2Na0e
UZkt3Nq+ImI0pUxeDGDkRDREposJDyrsD1R0K/hq/1k4cJcFouYVVfnbwT42TaCT
aiG4B5WeC4sDiXnh6RpaC6UyNT/cf933covAyCocTMGnv+WMaWf32VPxD/4PC5jM
Iy8XvGSWD6UbMkiOTxLYe6IvltIgmP4LhW7/GRboOM3PYQWijccvB+I8jOUEsdnY
C62+hZYj65ArZYdCSJvVt9iuGg9uXo4l9xtmaUf6ZzRfh9UQau80hh8BfuFG9DZM
jq5XVXVZ7DAaltAe2KdG9m1X8+MtFuSjjdVYMrW6Z3KkB8Hp/k/JRw==
=9pxS
-----END PGP SIGNATURE-----


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20100118/952689f1/attachment.htm>