Opendnssec is a complete dnssec zone signing system which is very easy to use with stability and security in mind. there are a lot of details in signing zone files with dnssec and opendnssec covers most of it.

softhsm 2 is a software implementation of a generic cryptographic device with a pkcs #11 cryptographic token interface.

this package contains command line tools.