3

One of the folks I work with is a fan of Bernstein's TinyDNS, so we run it internally. I'm having trouble figuring to how to add a CAA record and a SSHFP record to the server. There's a page on Running a DNS Server, but it does not state how to add the records.

How do I add CAA and SSHFP records to TinyDNS?

2 Answers 2

3

You should be able to use the generic record format in tinydns. it allows you to specify the type.

An example is at http://anders.com/projects/sysadmin/djbdnsRecordBuilder/.

1
2

Here are the entries I use for majid.info:

:majid.info:257:\000\005issueletsencrypt.org
:majid.info:257:\000\011issuewildletsencrypt.org
:majid.info:257:\000\005iodefmailto:ssladministrator@majid.org:600

corresponding to:

CAA 0 issue "letsencrypt.org"
CAA 0 issuewild "letsencrypt.org"
CAA 0 iodef "mailto:ssladministrator@majid.org"
2
  • Beware that iodef should start with mailto:, I think.
    – lapo
    Apr 30, 2018 at 20:46
  • So it does. Thank you very much for catching that, SSLLabs didn't... May 1, 2018 at 21:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.