[Opendnssec-user] getting dnssec keytag from CKAID label when using softhsm?

Paul Wouters paul at nohats.ca
Mon Dec 10 19:58:35 UTC 2012


Hi,

When using an HSM, I can run dnssec-fromlabel with the CKAID to get the
keytag/algo of the key. How can I do the same with softhsm? Is that only
possible recompiling bind with softhsm as PKCS#11 provider?

Perhaps the ods suite can add a small utility for this? Or even better,
store this in the signconf XML?

Paul



More information about the Opendnssec-user mailing list