Today we are going to install a PowerDNS Authoritative server version 4.5 with MariaDB 10.5 backend on an Ubuntu 20.04 LTS Linux server.
Continue reading “Install PowerDNS on Ubuntu 20.04 LTS”SHA-1 DNSSEC algorithms disabled
For a long time, SHA-1 hash algorithms are considered non-secure. The bit-length is insufficient for the current computer power. In January 2020, researchers described an attack that has the potential for dangerous and far-reaching consequences in the DNS ecosystem.
Continue reading “SHA-1 DNSSEC algorithms disabled”Configuring SSL for PowerDNS api
By default, the PowerDNS api comes with it’s own built in web server and API endpoint, which listens on port 8081. This is not a problem if you use it on your internal trusted network, or if you just need to get something up quickly and don’t care about security. But if you want to access the API for example over the internet, it’s a good idea to use a more secure solution.
This blog post will detail how to wrap your PowerDNS webserver/API with SSL using the Nginx web server as a reverse proxy.
Continue reading “Configuring SSL for PowerDNS api”Wanted! Beta testers
We are making great progress on a brand new application, build from the ground up. For easier deployment we changed architecture as well.
Continue reading “Wanted! Beta testers”ICANN key rollover postponed
Yesterdag on october 11th 2017 would have been the date for a key rollover. ICANN, the organisation who controls the root of the DNSSEC trust tree, however postponed this key rollover until further notice. This is because they see that about 5% of all resolvers still use the old key, and doing a rollover breaks DNS resolving. Continue reading “ICANN key rollover postponed”
Install PowerDNS Cluster Part 1
Today we are going to install our first node of a PowerDNS cluster. This node is going to be the Master, this means this server will host the MySQL/MariaDB master and this server will do the DNSSEC signing. Continue reading “Install PowerDNS Cluster Part 1”
DNSSEC-script.com is born
Welcome to our blog page, today this website is born, we are working on it.