bind-pkcs11-utils is Bind tools with native PKCS#11 for using DNSSEC
Introduction
In this tutorial we learn how to install bind-pkcs11-utils on CentOS 8.
What is bind-pkcs11-utils
This is a set of PKCS#11 utilities that when used together create rsa keys in a PKCS11 keystore. Also utilities for working with DNSSEC compiled with native PKCS#11 functionality are included.
We can use yum or dnf to install bind-pkcs11-utils on CentOS 8. In this tutorial we discuss both methods but you only need to choose one of method to install bind-pkcs11-utils.
Install bind-pkcs11-utils on CentOS 8 Using dnf
Update yum database with dnf using the following command.
sudo dnf makecache --refresh
The output should look something like this:
CentOS Linux 8 - AppStream 43 kB/s | 4.3 kB 00:00
CentOS Linux 8 - BaseOS 65 kB/s | 3.9 kB 00:00
CentOS Linux 8 - ContinuousRelease 43 kB/s | 3.0 kB 00:00
CentOS Linux 8 - Extras 23 kB/s | 1.5 kB 00:00
CentOS Linux 8 - FastTrack 40 kB/s | 3.0 kB 00:00
CentOS Linux 8 - HighAvailability 36 kB/s | 3.9 kB 00:00
CentOS Linux 8 - Plus 24 kB/s | 1.5 kB 00:00
CentOS Linux 8 - PowerTools 50 kB/s | 4.3 kB 00:00
Extra Packages for Enterprise Linux Modular 8 - x86_64 13 kB/s | 9.2 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 24 kB/s | 8.5 kB 00:00
Metadata cache created.
After updating yum database, We can install bind-pkcs11-utils using dnf by running the following command:
sudo dnf -y install bind-pkcs11-utils
Install bind-pkcs11-utils on CentOS 8 Using yum
Update yum database with yum using the following command.
sudo yum makecache --refresh
The output should look something like this:
CentOS Linux 8 - AppStream 43 kB/s | 4.3 kB 00:00
CentOS Linux 8 - BaseOS 65 kB/s | 3.9 kB 00:00
CentOS Linux 8 - ContinuousRelease 43 kB/s | 3.0 kB 00:00
CentOS Linux 8 - Extras 23 kB/s | 1.5 kB 00:00
CentOS Linux 8 - FastTrack 40 kB/s | 3.0 kB 00:00
CentOS Linux 8 - HighAvailability 36 kB/s | 3.9 kB 00:00
CentOS Linux 8 - Plus 24 kB/s | 1.5 kB 00:00
CentOS Linux 8 - PowerTools 50 kB/s | 4.3 kB 00:00
Extra Packages for Enterprise Linux Modular 8 - x86_64 13 kB/s | 9.2 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 24 kB/s | 8.5 kB 00:00
Metadata cache created.
After updating yum database, We can install bind-pkcs11-utils using yum by running the following command:
sudo yum -y install bind-pkcs11-utils
How To Uninstall bind-pkcs11-utils on CentOS 8
To uninstall only the bind-pkcs11-utils package we can use the following command:
sudo dnf remove bind-pkcs11-utils
bind-pkcs11-utils Package Contents on CentOS 8
/usr/lib/.build-id
/usr/lib/.build-id/0a
/usr/lib/.build-id/0a/1c0786012b322e485fd1a8b49f8da074912a26
/usr/lib/.build-id/23
/usr/lib/.build-id/23/dc53a97270d0314a948daa564558a68b52c0fc
/usr/lib/.build-id/4f
/usr/lib/.build-id/4f/447e93ae0680aa04a1caba05fa163a79aa1aa8
/usr/lib/.build-id/7a
/usr/lib/.build-id/7a/1a0a9bb5421785bbcafbe45e799d5573c85975
/usr/lib/.build-id/7a/c9fe0b65bdadd117c6b09458c83c4b979328a1
/usr/lib/.build-id/84
/usr/lib/.build-id/84/f2527eea4abe1210d2e2ce2fa1236f3deea0df
/usr/lib/.build-id/8f
/usr/lib/.build-id/8f/48165db929da9361b8e197ae79476e6348c52b
/usr/lib/.build-id/97
/usr/lib/.build-id/97/74d790747dd0955867bb3ea78f03cf6bea8a59
/usr/lib/.build-id/9e
/usr/lib/.build-id/9e/0193ffb89c582a32c9812621d8601fef519274
/usr/lib/.build-id/ab
/usr/lib/.build-id/ab/44c7d5cce560c4299a706919c8c04b844e9fb8
/usr/lib/.build-id/ad
/usr/lib/.build-id/ad/224cf46159086902687e6e7b3a452862a78800
/usr/lib/.build-id/cc/872c0082fa9f569e203ce320f17103a4a3fe9a
/usr/sbin/dnssec-dsfromkey-pkcs11
/usr/sbin/dnssec-importkey-pkcs11
/usr/sbin/dnssec-keyfromlabel-pkcs11
/usr/sbin/dnssec-keygen-pkcs11
/usr/sbin/dnssec-revoke-pkcs11
/usr/sbin/dnssec-settime-pkcs11
/usr/sbin/dnssec-signzone-pkcs11
/usr/sbin/dnssec-verify-pkcs11
/usr/sbin/pkcs11-destroy
/usr/sbin/pkcs11-keygen
/usr/sbin/pkcs11-list
/usr/sbin/pkcs11-tokens
/usr/share/man/man8/dnssec-checkds-pkcs11.8.gz
/usr/share/man/man8/dnssec-checkds.8.gz
/usr/share/man/man8/dnssec-dsfromkey-pkcs11.8.gz
/usr/share/man/man8/dnssec-dsfromkey.8.gz
/usr/share/man/man8/dnssec-importkey-pkcs11.8.gz
/usr/share/man/man8/dnssec-importkey.8.gz
/usr/share/man/man8/dnssec-keyfromlabel-pkcs11.8.gz
/usr/share/man/man8/dnssec-keyfromlabel.8.gz
/usr/share/man/man8/dnssec-keygen-pkcs11.8.gz
/usr/share/man/man8/dnssec-keygen.8.gz
/usr/share/man/man8/dnssec-revoke-pkcs11.8.gz
/usr/share/man/man8/dnssec-revoke.8.gz
/usr/share/man/man8/dnssec-settime-pkcs11.8.gz
/usr/share/man/man8/dnssec-settime.8.gz
/usr/share/man/man8/dnssec-signzone-pkcs11.8.gz
/usr/share/man/man8/dnssec-signzone.8.gz
/usr/share/man/man8/dnssec-verify-pkcs11.8.gz
/usr/share/man/man8/dnssec-verify.8.gz
/usr/share/man/man8/pkcs11-destroy.8.gz
/usr/share/man/man8/pkcs11-keygen.8.gz
/usr/share/man/man8/pkcs11-list.8.gz
/usr/share/man/man8/pkcs11-tokens.8.gz
/usr/lib/.build-id
/usr/lib/.build-id/2d
/usr/lib/.build-id/2d/bd82dba27e31d6f06cd6cc90aec657ffa29777
/usr/lib/.build-id/31
/usr/lib/.build-id/31/0fc1e77ff1b34a8177e1aa509d2bf4f71a5b0c
/usr/lib/.build-id/40
/usr/lib/.build-id/40/22378ee1af2910fdd90053979a7e3a157032aa
/usr/lib/.build-id/4f
/usr/lib/.build-id/4f/c688580ef104d43d58d602adb9e76bd5e38790
/usr/lib/.build-id/51
/usr/lib/.build-id/51/bee53cafc80a4903c55348c03a895d7da3144a
/usr/lib/.build-id/54
/usr/lib/.build-id/54/6a768f77bc49fbcd76f7e1618fa4d61caf34e9
/usr/lib/.build-id/54/e040518e22c9755a574f068ca98dc0aac2b89e
/usr/lib/.build-id/57
/usr/lib/.build-id/57/9194b15a3a0ab873db53dd0feda199cd658ca5
/usr/lib/.build-id/59
/usr/lib/.build-id/59/608aff385bae19c2a746f2bab1210dfd377215
/usr/lib/.build-id/61
/usr/lib/.build-id/61/e3b39a6da624be2a7ecb976ea219648f7b3632
/usr/lib/.build-id/8b
/usr/lib/.build-id/8b/e5de8bab24bc5cd5bea0681df65d85493f6f62
/usr/lib/.build-id/b4
/usr/lib/.build-id/b4/6a89bffde6505b9dcaf0d0f9da7232e5e4408c
/usr/sbin/dnssec-dsfromkey-pkcs11
/usr/sbin/dnssec-importkey-pkcs11
/usr/sbin/dnssec-keyfromlabel-pkcs11
/usr/sbin/dnssec-keygen-pkcs11
/usr/sbin/dnssec-revoke-pkcs11
/usr/sbin/dnssec-settime-pkcs11
/usr/sbin/dnssec-signzone-pkcs11
/usr/sbin/dnssec-verify-pkcs11
/usr/sbin/pkcs11-destroy
/usr/sbin/pkcs11-keygen
/usr/sbin/pkcs11-list
/usr/sbin/pkcs11-tokens
/usr/share/man/man8/dnssec-checkds-pkcs11.8.gz
/usr/share/man/man8/dnssec-checkds.8.gz
/usr/share/man/man8/dnssec-dsfromkey-pkcs11.8.gz
/usr/share/man/man8/dnssec-dsfromkey.8.gz
/usr/share/man/man8/dnssec-importkey-pkcs11.8.gz
/usr/share/man/man8/dnssec-importkey.8.gz
/usr/share/man/man8/dnssec-keyfromlabel-pkcs11.8.gz
/usr/share/man/man8/dnssec-keyfromlabel.8.gz
/usr/share/man/man8/dnssec-keygen-pkcs11.8.gz
/usr/share/man/man8/dnssec-keygen.8.gz
/usr/share/man/man8/dnssec-revoke-pkcs11.8.gz
/usr/share/man/man8/dnssec-revoke.8.gz
/usr/share/man/man8/dnssec-settime-pkcs11.8.gz
/usr/share/man/man8/dnssec-settime.8.gz
/usr/share/man/man8/dnssec-signzone-pkcs11.8.gz
/usr/share/man/man8/dnssec-signzone.8.gz
/usr/share/man/man8/dnssec-verify-pkcs11.8.gz
/usr/share/man/man8/dnssec-verify.8.gz
/usr/share/man/man8/pkcs11-destroy.8.gz
/usr/share/man/man8/pkcs11-keygen.8.gz
/usr/share/man/man8/pkcs11-list.8.gz
/usr/share/man/man8/pkcs11-tokens.8.gz
References
Summary
In this tutorial we learn how to install bind-pkcs11-utils on CentOS 8 using yum and dnf.
