ISPConfig3 and KSK&ZSK renewal

Discussion in 'General' started by pzajda, Oct 29, 2022.

  1. pzajda

    pzajda Member HowtoForge Supporter

    Hello,

    After some unsuccessful search on this forum, I have some question about DNSSEC in ISPConfig3:
    • I took a look into the ISPConfig3 source code and I found renewal of the signed zone but no renewal of the ZSKS and KSK. Did I miss something?
      I read it is recommended to change them sometimes. For me it is a good thing it is not automated but I would like to be sure :)
    • If I want to renew keys for a zone, how can I proceed?
      Because we have to keep old keys some days the time resolvers take new keys in account.

    Thanks.
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    They are not renewed automatically. Not sure if we currently have an option to do a rollover to new keys, I don't think so.
     
    pzajda likes this.

Share This Page