How To Install opendnssec-enforcer on Debian 9

In this tutorial we learn how to install opendnssec-enforcer on Debian 9. opendnssec-enforcer is tool to prepare DNSSEC keys (common package)

Introduction

In this tutorial we learn how to install opendnssec-enforcer on Debian 9.

What is opendnssec-enforcer

opendnssec-enforcer is:

OpenDNSSEC is a complete DNSSEC zone signing system which is very easy to use with stability and security in mind. There are a lot of details in signing zone files with DNSSEC and OpenDNSSEC covers most of it.

OpenDNSSEC Enforcer, which is a tool to make sure that there are enough keys for all of the zones, and take the policy and key information from the KASP database and turn it into an xml file that the signer can use.

The package contains OpenDNSSEC Enforcer documentation, manpages and it depends on either sqlite3 or mysql backend package with binaries.

There are three methods to install opendnssec-enforcer on Debian 9. We can use apt-get, apt and aptitude. In the following sections we will describe each method. You can choose one of them.

Install opendnssec-enforcer Using apt-get

Update apt database with apt-get using the following command.

sudo apt-get update

After updating apt database, We can install opendnssec-enforcer using apt-get by running the following command:

sudo apt-get -y install opendnssec-enforcer

Install opendnssec-enforcer Using apt

Update apt database with apt using the following command.

sudo apt update

After updating apt database, We can install opendnssec-enforcer using apt by running the following command:

sudo apt -y install opendnssec-enforcer

Install opendnssec-enforcer Using aptitude

If you want to follow this method, you might need to install aptitude first since aptitude is usually not installed by default on Debian. Update apt database with aptitude using the following command.

sudo aptitude update

After updating apt database, We can install opendnssec-enforcer using aptitude by running the following command:

sudo aptitude -y install opendnssec-enforcer

How To Uninstall opendnssec-enforcer on Debian 9

To uninstall only the opendnssec-enforcer package we can use the following command:

sudo apt-get remove opendnssec-enforcer

Uninstall opendnssec-enforcer And Its Dependencies

To uninstall opendnssec-enforcer and its dependencies that are no longer needed by Debian 9, we can use the command below:

sudo apt-get -y autoremove opendnssec-enforcer

Remove opendnssec-enforcer Configurations and Data

To remove opendnssec-enforcer configuration and data from Debian 9 we can use the following command:

sudo apt-get -y purge opendnssec-enforcer

Remove opendnssec-enforcer configuration, data, and all of its dependencies

We can use the following command to remove opendnssec-enforcer configurations, data and all of its dependencies, we can use the following command:

sudo apt-get -y autoremove --purge opendnssec-enforcer

Dependencies

opendnssec-enforcer have the following dependencies:

References

Summary

In this tutorial we learn how to install opendnssec-enforcer package on Debian 9 using different package management tools: apt, apt-get and aptitude.