I have a local DNS server (BIND 9.10). I just ocnfigured DNSEC but I am facing problems at the client side (python script).
How can I test if my DNS server is configured correctly? that the DNSSEC is correct?
I am running authoritative server and want to sign my own zone. My zone name is
com, I have two servers, say:
I am running a resolver (at the client side using python dnspython) and I want to validate received signatures?
I want to make a simple setting. I do not need the trust chain. The client jsut want to check the authenticity of the Zone Siging Key (ZSK) using the DNS Key Signing Key (KSK). No more higher levels validation needed in my set-up.
More about my zone signed file, and my client can be found here and another more technical one in stack-overflow here. Please let me know if you need more details. I also cut the full signature from my posts for brevity and use general names of the servers:
b.com for privacy.