This section describes common Zone Management activities in OpenDNSSEC.
The details of the command utilities shown below can be found here.
Zones can be added and removed at will. If the optional parameters are not given, then it will default to the policy default and the /var/opendnssec/ subdirectories.
This command will report positively with a message like:
Using this command thousands of times might be slow since it also writes to zonelist.xml. Use --no-xml to stop this behavior. Then export the zonelist when you are finished:
Alternatively, you could manually edit the zonelist.xml and then give the command:
After zones are added, they will show up in your logs as follows:
If you opened the latter file, you would find the settings that were applied to the zone at the time this file was added.
When you update the content of an unsigned zone you must tell the signer engine to re-read the unsigned zone file using the ods-signer command like this:
This also have the effect that you schedule the zone for immediate resigning.