Skip to end of metadata
Go to start of metadata

OpenDNSSEC 2.0 

  • Rewrite of the Enforcer
    • Performance improvements for large numbers of zones


  • Enforcer
    • Algorithm rollover
    • Allow KSK and ZSK to be the same key
    • Support multiple key rollover methods
    • Support policy rollover
  • Signer
    • Database input and output adapter
    • Dynamic updates
  • General
    • Support for passing through unsigned zones
    • Monitoring & usability improvements
    • GOST and ECDSA algorithm
    • Offline keys
    • Unified control interface
    • Inventory and formal codes for all syslog messages
    • Incremental transition from/to NSEC to/from NSEC3
  • No labels