Offer Packt Publishing Dns In Action_3

Tham khảo tài liệu offer packt publishing dns in action_3, công nghệ thông tin, cơ sở dữ liệu phục vụ nhu cầu học tập, nghiên cứu và làm việc hiệu quả
Nội dung trích xuất từ tài liệu:
Offer Packt Publishing Dns In Action_3 Chapter 3 8ISc+DACJGITaXBkRP+iNkjyrGU+w29FTH3zZ4ahEk26 JvxtEUhWDvaqJYO6S8n2N2RqR/Qhd08UsvwLyCEshIff BqPtFMzm/IvJf+TB ) ; key id = 3719 SIG KEY 3 2 259200 20010607033618 ( 20010601084258 3719 company.com. BHrEtaQBiMpVRxVQgl3i4Nf7LAPXfftgFiqH6EGI64Fp BhuuVu/GipM= )Note that the KEY record has not changed except the key ID derived from the key value. Alsonote the SIG record that contains the following items in the generated file: • The signed record type is the KEY, i.e., a KEY record is signed • Algorithm=3, i.e., DSA • The label field contains 2 since the DNS name of company.com consists of two chains, i.e., the company chain and the com chain • The original TTL is 259200 • The signature expires on 20010607033618, i.e., June 7, 2001 at 03:36:18 (UTC) • The signature is valid until 200110601084258, i.e., June 1, 2001 at 08:42:58 (UTC) • The key ID is 3719. • The signature was created by company.comSimilarly, the department.company.com key can be signed as well: dnssec-makekeyset -t 259200 –e +500000 Kdepartment.company.com.+003+23457thus creating the keyset-department.company.com. file containing the relevant digital signature: $ORIGIN . $TTL 259200 ; 3 days department.company.com IN KEY 256 3 3 ( BP+lDE7W5LpEr7djd26pQGd6wctJ+8aICq1BMuCupKI0 0CNPVDR64sHWPionq3Q07t884DeA9vOb4b3k14daZmBR KINfqvBF/hintoTqJH2jENUsLxNk23CTBgi2fIQuZbKZ XSdJan4GUGGMQjFjdf8VSlHLNc0YaWB4hXqfZuQRRgbW UFA4CZX0SgSOpNAm4h6jk7S1qnv8EL+MUdnVOg3wT82q j7maxAdEPOY5Q6f0RIJ+QHEsl6xuGoWYEjYmyGlH+r9r /N0KLxf904XesziZr3lloPnuXTC/L03gA60ViJYYQXeu CGldjcLP6AK2rm16svx/sTM+v+FfSdI7pkqBOQoq28bf d3qgRiojFIWbeBhk14vjBn5INbwxcErGmKXtdbplGHxD ukSykxrQBZNRNmG8 ) ; key id = 23457 SIG KEY 3 3 259200 20010607040154 ( 20010601090834 23457 department.company.com. BAre8ynW1PvA version 6hhe69mbVmAGm24dxwJUqcpHE2PvXwq +V23HHqZWQo= )The signature can be sent to the administrator of the higher domain, i.e., company.com.The higher-level domain administrator has a tool for signing keys from subordinate domains: dnssec-signkey keyset-department.company.com. Kcompany.com.+003+03719The first parameter is the file name received from the administrator of the subordinate domain, andthe second parameter is the common beginning of the names of files containing both the publicand private keys of the signing authority. 69DNS ExtensionThis will result in the creation of the signedkey-department.company.com. file with signedpublic key (signed KEY record): $ORIGIN . $TTL 259200 ; 3 days department.company.com IN KEY 256 3 3 ( BP+lDE7W5LpEr7djd26pQGd6wctJ+8aICq1BMuCupKI0 0CNPVDR64sHWPionq3Q07t884DeA9vOb4b3k14daZmBR KINfqvBF/hintoTqJH2jENUsLxNk23CTBgi2fIQuZbKZ XSdJan4GUGGMQjFjdf8VSlHLNc0YaWB4hXqfZuQRRgbW UFA4CZX0SgSOpNAm4h6jk7S1qnv8EL+MUdnVOg3wT82q j7maxAdEPOY5Q6f0RIJ+QHEsl6xuGoWYEjYmyGlH+r9r /N0KLxf904XesziZr3lloPnuXTC/L03gA60ViJYYQXeu CGldjcLP6AK2rm16svx/sTM+v+FfSdI7pkqBOQoq28bf d3qgRiojFIWbeBhk14vjBn5INbwxcErGmKXtdbplGHxD ukSykxrQBZNRNmG8 ) ; key id = 23457 SIG KEY 3 3 259200 20010607040154 ( 20010601090834 3719 company.com. BIusFqCyPwcBIVhWq6LP+QuLk0usd2SUpQ26D9dDf7i0 ...