• Home
  • History
  • Annotate
  • only in this directory
NameDateSize

..24-Apr-201416

CHANGELOGH A D01-Dec-201021.3 KiB

config.h.inH A D01-Dec-20105.8 KiB

config_zkt.hH A D01-Dec-20103.3 KiB

configureH A D01-Dec-2010189.3 KiB

configure.acH A D01-Feb-20125.3 KiB

debug.hH A D27-Aug-20093.1 KiB

dki.cH A D01-Dec-201033.2 KiB

dki.hH A D01-Dec-20107.9 KiB

dnssec-zkt.cH A D01-Dec-201028.1 KiB

doc/H24-Apr-20144

domaincmp.cH A D01-Dec-20109.4 KiB

domaincmp.hH A D01-Dec-20102.1 KiB

examples/H24-Apr-20147

LICENSEH A D27-Aug-20091.5 KiB

log.cH A D01-Dec-201012.8 KiB

log.hH A D01-Dec-20102.8 KiB

Makefile.inH A D01-Dec-20107.1 KiB

man/H24-Apr-201417

misc.cH A D01-Dec-201026.3 KiB

misc.hH A D01-Dec-20104 KiB

ncparse.cH A D01-Dec-20108.5 KiB

ncparse.hH A D23-Mar-20101.9 KiB

nscomm.cH A D01-Dec-20107.1 KiB

nscomm.hH A D01-Dec-20102.2 KiB

READMEH A D01-Dec-20101.4 KiB

README.loggingH A D01-Dec-20103.4 KiB

rollover.cH A D01-Dec-201023.2 KiB

rollover.hH A D28-Sep-20092.4 KiB

soaserial.cH A D23-Mar-20107.7 KiB

soaserial.hH A D23-Mar-20101.9 KiB

strlist.cH A D28-Sep-20094.5 KiB

strlist.hH A D27-Aug-20092 KiB

tagsH A D01-Dec-201028.5 KiB

tcap.cH A D01-Dec-20107.8 KiB

tcap.hH A D01-Dec-2010554

TODOH A D01-Dec-20101.6 KiB

zconf.cH A D01-Dec-201030.5 KiB

zconf.hH A D01-Dec-20106.5 KiB

zfparse.cH A D01-Dec-20107.6 KiB

zfparse.hH A D01-Dec-20102 KiB

zkt-conf.cH A D01-Dec-201010.6 KiB

zkt-keyman.cH A D01-Dec-201024.3 KiB

zkt-ls.cH A D01-Dec-201013 KiB

zkt-signer.cH A D01-Dec-201030.8 KiB

zkt-soaserial.cH A D27-Aug-20096.4 KiB

zkt.cH A D01-Dec-20109.9 KiB

zkt.hH A D27-Aug-20092.1 KiB

zone.cH A D01-Dec-20109.4 KiB

zone.hH A D27-Aug-20092.9 KiB

README

1#
2#	README  dnssec zone key tool
3#
4#	(c) March 2005 - Aug 2009 by  Holger Zuleger  hznet
5#	(c) domaincmp() Aug 2005 by Karle Boss & H. Zuleger (kaho)
6#	(c) zconf.c by Jeroen Masar & Holger Zuleger
7#
8
9For more information about the DNSSEC Zone Key Tool please
10have a look at "http://www.hznet.de/dns/zkt/"
11
12You can also subscribe to the zkt-users@sourceforge.net mailing list
13on the following website: https://lists.sourceforge.net/lists/listinfo/zkt-users
14
15The ZKT software is licenced under BSD (see LICENCE file)
16
17To build the software:
18a) Get the current version of zkt
19	$ wget http://www.hznet.de/dns/zkt/zkt-1.0.tar.gz
20
21b) Unpack
22	$ tar xzvf zkt-1.0.tar.gz
23
24c) Change to source directory
25	$ cd zkt-1.0
26
27d) Run configure script
28	$ ./configure
29
30e) Compile
31	$ make
32
33f) Install
34	# make install
35	# make install-man
36
37
38Prepare your setup:
39a) (optional) Install or rebuild the default dnssec.conf file 
40	$ zkt-conf -d -w	# Install new file
41		or
42	$ zkt-conf -s -w	# rebuild existing file
43
44b) (optional) Change default parameters
45	$ zkt-conf -s -O "Zonedir: /var/named/zones" -w
46		or use your prefered editor 
47	$ vi /var/named/dnssec.conf
48
49c) Prepare one of your zone for zkt
50	$ cd /var/name/zones/net/example.net	# change dir to zone directory
51	$ cp <zonefile> zone.db 		# copy and rename existing zone file to "zone.db"
52	$ zkt-conf -w zone.db			# create local dnssec.conf file and include dnskey.db into zone file
53

README.logging

1#
2#	README.logging
3#
4#	Introduction into the new logging feature 
5#	available since v0.96
6#	Per domain logging is enabled since v1.0
7#	
8
9In previous version of dnssec-signer every message was written
10to the default stdout and stderr channels, and the logging itself
11was handled by a redirection of those chanels to the logger command
12or to a file.
13
14Since v0.96, the dnssec-signer command is able to log all messages
15by itself. File and SYSLOG logging is supported.
16
17To enable the logging into a file channel, you have to specify
18the file or directory name via the commandline option -L (--logfile)
19or via the config file parameter "LogFile".
20	LogFile: ""|"<file>"|"<directory>"	(default is "")
21If a file is specified, than each run of dnssec-signer will append the
22messages to that file. If a directory is specified, than a file with a
23name of zkt-<ISOdate&timeUTC>+log" will be created on each dnssec-signer run.
24
25Since v1.0 per domain logging is possible.
26If the parameter "LogDomainDir:" is not empty, than the domain specific messages
27are written to a separate log file with a name like "zkt-<domainname>+log" in the
28directory specified by the parameter.
29If "LogDomainDir:" is set to ".", then the logfile will be created in the domain
30directory of the zone.
31
32Logging into the syslog channel could be enabled via the config file
33parameter "SyslogFacility".
34	SyslogFacility:	NONE|USER|DAEMON|LOCAL0|..|LOCAL7 (default is USER)
35
36For both channels, the log level could be set to one of six log levels:
37	LG_FATAL, LG_ERROR, LG_WARNING
38	LB_NOTICE, LG_INFO, LG_DEBUG
39
40The loglevel is settable via the config file parameter :
41	SyslogLevel: FATAL|ERROR|WARNING|NOTICE|INFO|DEBUG
42		(default is ERROR)
43and
44	LogLevel: FATAL|ERROR|WARNING|NOTICE|INFO|DEBUG
45   		(default is NOTICE)
46
47All the log parameters are settable on the commandline via the generic
48option -O "optstring" (--config-option="optstring").
49
50A verbose message output to stdout could be achieved by the commandline
51option -v (or -v -v).
52If you like to have this verbose messages also logged with a level of LG_DEBUG
53you should enable this by setting the config file option
54"VerboseLog" to a value of 1 or 2.
55
56Current logging messages:
57	LG_FATAL: Not all of the fatal errors are logged
58		(e.g.: config file or command line option fatal errors are
59		not logged)
60	LG_ERROR: All error messages will be logged
61	LG_WARNING: KSK lifetime expiration
62	LG_NOTICE:
63		Start and stop of dnssec-signer
64		Re-signing events 
65		Key rollover events
66		KSK key generation and revoking
67		Zone reload resp. freeze/thaw of dynamic zone
68	LG_INFO: Currently none
69		planned:
70		Mesages for key generation and key status change
71		(e.g.: pre-publish -> activate; revoked -> removed etc.)
72	LG_DEBUG: all "verbose" (-v) and "very verbose" (-v -v)  messages
73
74Some recomended and useful logging settings
75
76- The default setting
77	LogFile: ""
78	SyslogFacility: USER
79	SyslogLevel: NOTICE
80	VerboseLog: 0
81
82- Setting as in version v0.95
83	LogFile: "zkt-error.log"	# or a directory for separate logfiles
84	LogLevel: ERROR
85	SyslogFacility: NONE
86	VerboseLog: 0
87
88- Setting as in previous versions
89	LogFile: ""
90	SyslogFacility: NONE
91	VerboseLog: 0
92
93- Recommended setting for normal usage
94	LogFile: "zkt.log"	# or a directory for separate logfiles
95	LogLevel: ERROR
96	SyslogFacility: USER
97	SyslogLevel: NOTICE
98	VerboseLog: 0
99	
100- Recommended setting for debugging
101	LogFile: "zkt.log"	# or a directory for separate logfiles
102	LogLevel: DEBUG
103	SyslogFacility: USER
104	SyslogLevel: NOTICE
105	VerboseLog: 2
106