DNS Module to support ECDSA DNSSEC types

We have had several requests from our downstream customers that they would like to see ECDSA support for DNSSEC. This allows shorter DNS responses and uses less CPU on DNSSEC signing. The big push is for shorter DNS responses. These would be DNSSEC algorithms 13 and 14. We would love to see the capability to sign zones with these algorithms added to Webmin/Virtualmin.

Status: 
Closed (fixed)

Comments

Sure, we can add that. What size keys (in bits) are allowed for these algorithms though?

I thought I responded to this last year but apparently not. My apologies! ECDSAP256/SHA-256 is 256bit key and ECDSAP384/SHA-384 is 384bit key.

Ok, turns out that I did add this to Webmin already.

Status: Fixed ยป Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.