dnssec-dakar Wiki

dnssec-dakar Wiki

DNSSEC workshop planning wiki for SN Registry

Atelier de déploiement DNSSEC ccTLD .SN

Workshop will be held from October 20-22, 2006 at Laboratoire SIMES, ESP

Université Cheikh Anta Diop (http://www.ucad.sn/), Dakar, Sénégal

ORGANIZERS: Steven Huter, Network Startup Resource Center (NSRC) & Boubakar Barry and Alex Corenthin, NIC Senegal

INSTRUCTORS: Peter Koch, DENIC and Alain Aina, TRSTECH

TRAVEL ITINERARIES:

Peter Koch: Arrival Wed, October, 18th, 20:15 with AF718 from Paris

Alain Aina: Arrival 19th 18h05 ET907, departure 23th 7H30 ET906

WORKSHOP PARTICIPANTS:

CURI (4)

1. Boubakar BARRY <barry@ucad.sn>

2. Mouhamed Tidiane SECK < tidiane@adie.sn>

3. Alioune THIOUNE <thioune@ucad.sn>

4. Alex CORENTHIN < corenthin@ucad.sn>

SONATEL (2)

1. Mody Ndiaye

2. Amadou Cissoko

BCEAO (1)

1. Marcel PADOUNOU <mpadonou@bceao.int>

UCAD (2)

1. Fatou Dieng SARR <fdsarr@ucad.sn>

2. Médard BASSENE < bmedard@ucad.sn>

ADIE (2)

1. Abdoul Aziz GUEYE <aziz@adie.sn>

2.

CURRICULUM OUTLINE:

Friday, October 20

8h30 - 1OH

- Introduction of participants and Review of DNS (1unit)

BREAK(10H-10H15)

10H15- 12H

- Introduction/Review of DNSSEC (1 unit)

BREAK (12H-13H)

13H-14H45

- Setting up basic infrastructure (1 unit)

BREAK (14H45-15H)

15H-16H30

- Securing zone transfer (TSIG) and implementing in infrastructure (1 unit, hands-on practical)

Saturday, October 21

8h30-10H15

Configuring a security aware resolver and Signing a Zone (1 unit, hands-on practical)

BREAK (10H15-10H30)

10H30-12H

Troubleshooting and playing with secured zones (1 unit, practical) including introduction/demo/how to/perl-tools

BREAK (12H-13H)

13H-15H

- Delegation of signing authority and set up of delegation structure (2 units) Discussion of additions/alterations that may be necessary for the registration process

BREAK (15H15-15H30)

15H30-16H30

- rolling keys and other operational aspects (content of RFC4641 - 1 unit, theory)

Sunday, October 22

8H30-10H

- Architectual and operational issues of implementing DNSSEC (1 unit,theory)

BREAK (10H-10H15)

10H15-12H

- Constructing a project plan for your own organization (1-2 units)

BREAK (12H-13H)

13H-14H45

- Test deployment activities (hands-on)

BREAK(14H45-15H)

15H-16

closing ceremony

REFERENCE MATERIALS:

http://www.rfc-editor.org/rfc/rfc4033.txt

http://www.rfc-editor.org/rfc/rfc4034.txt

http://www.rfc-editor.org/rfc/rfc4035.txt

http://www.rfc-editor.org/rfc/rfc4086.txt

http://www.rfc-editor.org/rfc/rfc4641.txt

http://www.trstech.net/alain/DNS-Introduction.pdf

https://nsrc.org/wrc/workshops/2005/ccTLD-Dakar/jour1/RegistryFunctions-intro-Dakar.pdf

http://www.dnssec-deployment.org/documents/Koch-DNSSEC-Overview.pdf

http://www.nlnetlabs.nl/downloads/Qatar2006-DNSSEC-Deployment-2.pdf

https://nsrc.org/wrc/workshops/2005/ccTLD-Dakar/jour4/dnssec-dakar-francais-updated.pdf

https://nsrc.org/wrc/workshops/2005/ccTLD-Dakar/jour4/auth-only_TSIG-sn.pdf

https://nsrc.org/wrc/workshops/2005/ccTLD-Dakar/