Opendnssec is a complete dnssec zone signing system which is very easy to use with stability and security in mind. there are a lot of details in signing zone files with dnssec and opendnssec covers most of it.

softhsm 2 is a software implementation of a generic cryptographic device with a pkcs #11 cryptographic token interface.

this package contains development library. you will need external pkcs#11 header files.