Commit 56c7d743 authored by Joshua Tauberer's avatar Joshua Tauberer

warn that generating DNSSEC keys takes a while (still slow in some virtualized environments)

parent 062e8b83
...@@ -33,7 +33,7 @@ sudo mkdir -p /var/run/nsd ...@@ -33,7 +33,7 @@ sudo mkdir -p /var/run/nsd
mkdir -p "$STORAGE_ROOT/dns/dnssec"; mkdir -p "$STORAGE_ROOT/dns/dnssec";
if [ ! -f "$STORAGE_ROOT/dns/dnssec/keys.conf" ]; then if [ ! -f "$STORAGE_ROOT/dns/dnssec/keys.conf" ]; then
# These two steps take a while. echo "Generating DNSSEC signing keys. This may take a few minutes..."
# Create the Key-Signing Key (KSK) (-k) which is the so-called # Create the Key-Signing Key (KSK) (-k) which is the so-called
# Secure Entry Point. Use a NSEC3-compatible algorithm (best # Secure Entry Point. Use a NSEC3-compatible algorithm (best
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment