upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-05-28 04:34:54 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Minor grammar improvements in the Signing chapter of the DNSSEC Guide

Browse source 
(cherry picked from commit 6b1ad4dcfb)
This commit is contained in:
Suzanne Goldlust 2022-06-17 15:06:23 +00:00 committed by Matthijs Mekking
parent 342baee607
commit 003423974b
2 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
doc/arm/dnssec.inc.rst
View file

@ -147,7 +147,7 @@ This ``custom`` policy, for example:
rotated after one year and the ZSK after 60 days.
Also:
- The configured keys also have a lifetime set and use the ECDSAP384SHA384
- The configured keys have a lifetime set and use the ECDSAP384SHA384
algorithm.
- The last line instructs BIND to generate NSEC3 records for
:ref:`Proof of Non-Existence <advanced_discussions_proof_of_nonexistence>`,

4
doc/dnssec-guide/signing.rst
View file

@ -1149,7 +1149,7 @@ ZSK, and 257 is KSK.
The name of the file also tells us something
about the contents. See chapter :ref:`zone_keys` for more details.
Make sure these files are readable by :iscman:`named` and make sure that the
Make sure that these files are readable by :iscman:`named` and that the
``.private`` files are not readable by anyone else.
Alternativelly, the :iscman:`dnssec-keyfromlabel` program is used to get a key
@ -1429,7 +1429,7 @@ and the KSK file name. This also generates a plain-text file
to provide the parent zone administrators with the ``DNSKEY`` records (or their
corresponding ``DS`` records) that are the secure entry point to the zone.
Finally, you'll need to update :iscman:`named.conf` to load the signed version
Finally, :iscman:`named.conf` needs to be updated to load the signed version
of the zone, which looks something like this:
.. code-block:: none