npub1rmlrk8t89jh2vv57je7xczz4nn5shkaa6m6zqqyh2hjt5ay9m9vs9xxa6t (npub1rml…xa6t) Read that too and also had a look at #cznic #Knot for a #dnssec bump-in-the-wire signer.
Also seen that @nitrokey also has doc for #Knot: https://docs.nitrokey.com/nethsm/knotdns
One operational question I have is the the ability to pre-generate keys once on the HSM, lock the #pkcs11 interface and have #Knot use them for automatic roll-overs according to policy w/o creating new keys automatically.
My understanding of #Knot manual mode is that key timing has to be done… well, manually!
Guillaume-Jean Herbiet
npub1rc…td6l7
2024-11-12 15:16:54 UTC
in reply to nevent1q…0wg7
Author Public Key
npub1rc4t4fx4w6354k6u4wcwda3nltz3eg3ykzskkz7qchfejaa8gz2q4td6l7Seen on
wss://relay.ditto.pubPublished at
2024-11-12 15:16:54 UTCEvent JSON
{
"id": "5ce81f9d12bfb15717f375efe45052edbcbd8ca691b3732e0fcf582709a34285",
"pubkey": "1e2abaa4d576a34adb5cabb0e6f633fac51ca224b0a16b0bc0c5d39977a74094",
"created_at": 1731424614,
"kind": 1,
"tags": [
[
"p",
"1efe3b1d672caea6329e967c6c08559ce90bdbbdd6f420009755e4ba7485d959",
"wss://relay.mostr.pub"
],
[
"p",
"4421e6f8f57df36e663f1a4568344196e61ea62eb94203c9c02d83bcb3eb9c66",
"wss://relay.mostr.pub"
],
[
"e",
"312799e2771f737d694cfeaaa58548a3f8a7e15f6f070e90c3729969ce875e8c",
"wss://relay.mostr.pub",
"reply"
],
[
"t",
"cznic"
],
[
"t",
"knot"
],
[
"t",
"dnssec"
],
[
"t",
"pkcs11"
],
[
"proxy",
"https://mamot.fr/users/gjherbiet/statuses/113470643508122453",
"activitypub"
]
],
"content": "nostr:npub1rmlrk8t89jh2vv57je7xczz4nn5shkaa6m6zqqyh2hjt5ay9m9vs9xxa6t Read that too and also had a look at #cznic #Knot for a #dnssec bump-in-the-wire signer.\nAlso seen that @nitrokey also has doc for #Knot: https://docs.nitrokey.com/nethsm/knotdns\nOne operational question I have is the the ability to pre-generate keys once on the HSM, lock the #pkcs11 interface and have #Knot use them for automatic roll-overs according to policy w/o creating new keys automatically.\nMy understanding of #Knot manual mode is that key timing has to be done… well, manually!",
"sig": "413ff4b8fd48a75e02f67673916c046c0fa4b5c1b8c401d9bdf99dca988b3925b5d919dd2bbbfa324ef58e24f2da270c769d403320382ba86877141dac177e04"
}