[Opendnssec-user] Re: How to supply DS to nagios_dnssec.rb?

[Dick Visser]

On 16 April 2012 21:58, Dick Visser <visser at terena.org> wrote:
> Hi
>
> I've started signing a domain, but did not upload our DS key to the parent.
> What I wanted to do was to let ods run for a while, and monitor it
> using nagios_dnssec.rb.
> I was under the impression that I could manually supply a DS record to
> the script.
> Is there a way to make this work? DLV?

I got it to work by RTFM:

ods-ksmutil key export --zone terena.org > terena.org.ksk

Now I use this file for the nagios check:

./nagios_dnssec.rb --no-validation --rootkey terena.org.ksk -z
terena.org --kskwarn 3 (...etc etc)


Dick








-- 
Dick Visser
System & Networking Engineer
TERENA Secretariat
Singel 468 D, 1017 AW Amsterdam
The Netherlands