Dear Folks,
I want to use the slightly more modern algorithm 13 (ECDSA P256) for
key signing, and want to disable salting in NSEC3, and have one
iteration only of hashing.
<Denial>
<NSEC3>
<Resalt>PT0S</Resalt>
<Hash>
<Algorithm>1</Algorithm>
<Iterations>1</Iterations>
<Salt length="0"/>
</Hash>
</NSEC3>
</Denial>
I added a length="256" attribute to the algorithm element, which
seemed to make the software happier. However, it does not like the
value I gave for Resalt. How do you express that you want no salt in
your NSEC3 records?
The documentation seems to require me to read the source code.
--
Nick Urbanik http://nicku.org ni...@nicku.org
GPG: 7FFA CDC7 5A77 0558 DC7A 790A 16DF EC5B BB9D 2C24 ID: BB9D2C24
_______________________________________________
Opendnssec-user mailing list
Opendnssec-user@lists.opendnssec.org
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
