Project

General

Profile

Actions
Copy link

Enhancement #482

closed

Review DNSSEC key length

Added by Marc Dequènes over 8 years ago. Updated almost 6 years ago.

Status:
Resolved
Priority:
High
Assignee:
Marc Dequènes
Category:
Service :: DNS
Start date:
2015-10-20
Due date:
% Done:

100%

Estimated time:
Patch Available:
Confirmed:
No
Branch:
Entity:
DuckCorp
Security:
Yes
Help Needed:

Description

The KSK is using type 8 with 2048bits (renewd every year), and ZSK type 8 with 1024bits (renewed every month).

Actions
Copy link
 #1

Updated by Marc Dequènes over 8 years ago

  • Priority changed from Normal to High
Actions
Copy link
 #2

Updated by Marc Dequènes almost 6 years ago

  • Status changed from New to Resolved
  • Assignee changed from Pierre-Louis Bonicoli to Marc Dequènes

Switched to type 10 with 4096/2048bits.

I had to use opendnssec from Stretch backports to get fixes around rollover.

Actions
Copy link
 #3

Updated by Marc Dequènes almost 6 years ago

  • % Done changed from 0 to 100
Actions
Copy link

Also available in: Atom PDF