9 Čec
2018
9 Čec
'18
12:20
Hi Daniel and Libor,
We will probably implement something like
import-pkcs11 command to keymgr.
But I cannot say when, because we have other feature requests on the list.
I understand. But we need it now :)
So I've checked out the source of pykeymgr at
https://gitlab.labs.nic.cz/knot/knot-dns/blob/2.6/src/utils/pykeymgr/pykeym…
It looks like all I'd need to do is look for database keys
<1,zone_name,*> to export in JSON, send that to other cluster nodes and
import it with pykeymgr's import facility.
The value stored would encompass public_key, keytag, algorithm, ksk,
created, publish, active, retire, remove. That looks pretty complete to me.
Am I oversimplifying anything?
I can fork the repo of your choice and offer a pull request, if you like.
Cheers,
-Rick