[Opendnssec-user] enforcer hooks

[Petr Spacek]

On 20.5.2014 13:56, Jakob Schlyter wrote:
>
> On 20 maj 2014, at 12:39, Petr Spacek <pspacek at redhat.com> wrote:
>
>> Now I have looked into /var/opendnssec/signconf/example.xml and it seems that I will be able to generate K*.private key except timestamps:
>>
>> Created: 20140429162528
>> Publish: 20140429162528
>> Activate: 20140429162528
>> ...
>
> You do not need those, just can just set them all to "now" in BIND (activate only if the key is used for signing). https://github.com/opendnssec/ods4bind/blob/master/ods4bind.pl should be useful as a guideline, it does just what you are aiming for I believe.

Thank you, I will take a look!

-- 
Petr Spacek  @  Red Hat