DNSsec Zone Key Tool
Project homepage: https://www.hznet.de/dns/zkt/
Description
ZKT (Zone Key Tool) manages keys and signatures for DNSSEC-zones.
It consists of four commands:
zkt-conf, to manage the config file
zkt-ls, to list dnssec zone keys
zkt-keyman, to manage dnssec zone keys manually (seldom used)
zkt-signer, to sign a zone and manage the lifetime and rollover of the
zone signing keys
Most of the commands are simple wrapper commands around BIND's
dnssec-keygen(8) and dnssec-signzone(8) commands.
Warning: ZKT is old and doesn't seem to be very actively maintained -
it might not work with current versions of BIND tools. Users looking
to setup DNSSEC should look elsewhere, either higher-level tools like
opendnssec or the built-in support in PowerDNS authoritative server, or
using lower-level tools directly (dnssec-signzone from the isc-bind
package or ldns-signzone from the ldns-utils package).
Package information
- Ports path
- security/zkt
- Package architecture
- amd64
- Maintainer
- The OpenBSD ports mailing-list <ports@openbsd.org>
- Categories
- security
- Available flavors
- None listed
Ports list build and test dependencies as well as runtime dependencies. pkg_add selects those needed for installation.