public keys

Unbound
1

Hello

What methods are there to update the dnssec.key file ?

We are using “unbound recursive resolver” and DNSSEC client API.

Getting the keys:

https://data.iana.org/root-anchors/

https://data.iana.org/root-anchors/icannbundle.pem

openssl x509 -in icannbundle.pem -noout -text

was able to dump the public key, need to know how to format dnssec.keys file

https://data.iana.org/root-anchors/root-anchors.p7s

openssl pkcs7 -inform der -in root-anchors.p7s -out root-anchors.pdf.pkcs7

openssl pkcs7 -print_certs -in root-anchors.pdf.pkcs7 -noout -text

was able to dump the public key, need to know how to format dnssec.keys file

https://data.iana.org/root-anchors/root-anchors.xml

this path does not seem to be updated

Thanks

2

"Modster, Anthony via Unbound-users" writes:

> Hello
>
> What methods are there to update the dnssec.key file ?
>
> We are using "unbound recursive resolver" and DNSSEC client API.

Since you are using unbound, unbound-anchor[1] is the obvious choice.

  jaap

[1] man unbound-anchor
    or <https://www.nlnetlabs.nl/documentation/unbound/unbound-anchor/&gt;
    for details

3

Thanks