From fc9e76fff0c7a5610e5d8aa447b1ce5833446c78 Mon Sep 17 00:00:00 2001 From: Pinga <121483313+getpinga@users.noreply.github.com> Date: Thu, 11 Jan 2024 02:59:06 +0200 Subject: [PATCH] Docs fixes. --- docs/install.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/install.md b/docs/install.md index c1d37c7..f3238a9 100644 --- a/docs/install.md +++ b/docs/install.md @@ -623,11 +623,11 @@ Replace `````` with the actual IP address of your slave server. Initially, you will need to generate the DNSSEC ZSK and KSK manually: ```bash -dnssec-keygen -a Ed25519 -b 2048 -n ZONE test. -dnssec-keygen -a Ed25519 -b 4096 -n ZONE -f KSK test. +dnssec-keygen -a Ed25519 -n ZONE test. +dnssec-keygen -a Ed25519 -n ZONE -f KSK test. ``` -After generating the keys, place them in the specified key-directory. +After generating the keys, place them in ```/var/lib/bind```. Run ```dnssec-dsfromkey Ktest.EXAMPLE.key``` on the KSK key you just generated, and the DS record must be submitted to IANA once setup is complete. Use rndc to tell BIND to load and use the new keys: