docs: add info on generating DS records

Change-Id: Ie826e2c7b099d4dec5b778b1267f7b5c5a0a6bba
This commit is contained in:
James E. Blair 2018-11-21 09:51:20 -08:00
parent ec9d3b0834
commit d9b6be5bad

View File

@ -37,4 +37,10 @@ Run::
And add the resulting files to the `dnssec_keys` key in the
`group/adns.yaml` private hiera file on puppetmaster.
If you need to generate DS records for the registrar, identify which
of the just-created key files is the key-signing key (examine the
contents of the files and read the comments therein). Then run::
dnssec-dsfromkey -2 $KEYFILE
.. note:: This section will be expanded.