Opendnssec is a complete dnssec zone signing system which is very easy to use with stability and security in mind. there are a lot of details in signing zone files with dnssec and opendnssec covers most of it.

support library for interfacing pkcs#11 compatible hardware security modules (hsm). this library allows programs to use cryptografic secure storages for keying material such as softhsm2 (hsm implemented in software), sca6000, aladdin etoken, opensc, ncipher or aep keyper.

this package contains command line tools.