Previous Topic

Next Topic

Filling in New Zealand Configuration Form

InternetNZ communication uses PGP signed messages. To enable PGP signing and verification, you need to create PGP keys, enter your keys in plug-in configuration form, and send your public key to InternetNZ. PGP keys should be generated using gpg command. To generate a key, log in to HSPcomplete VE and type

gpg --gen-key

Follow the instructions the gpg application gives you. Choose a 'DSA and ElGamal' type key, with keysize '1024', and '0' expiry. Provide you real name, comments and email. When asked for a passphrase specify a random password or leave the field blank. However, it is highly recommended to safeguard your secure key privacy by a password. Save the password into a secure place (store in a file or put it down on a piece of paper): you will need it for the plug-in configuration and other operations.

Once the key is generated, you can export it by typing:

gpg --export --armour <username>

Username is either the 'Real Name', 'Email Address' or both, that you have entered for the key a few steps before (type: 'gpg --list-keys' to view usernames for your keys).

This command prints out your public key:

gpg --export --armour <username> > <filename>

where <filename> is the name of the file where you have exported the public key

InternetNZ will provides you with its PGP public key as well. To find out InternetNZ public key ID, import InternetNZ into gpg key ring using command: gpg --import <filename> where <filename> is a file with InternetNZ public key. Then, by typing gpg --list-keys you will get a list of available keys, among which InternetNZ key, e.g.:

pub 1024D/FA4077A6 2002-04-08

uid SRS Application (Test srs-wgtn key) <srsapp@srs-wgtn.wgtn.cat-it.co.nz>

sub 1024g/CC17E4DF 2002-04-08

where FA4077A6 is the public key ID.

To enable InternetNZ, fill in configuration form at PCC > Service Director > Domain Manager > Setup > InternetNZ.

To configure the InternetNZ plug-in:

  1. Click the Edit button on the plug-in screen.
  2. Fill the form that appears:
    1. Specify the Remote host address, i.e. the path to InternetNZ script HSPcomplete will communicate with. The path will be provided to you after the registration at InternetNZ. For testing environment the remote host address is srstest.srs.net.nz/srs/registrar
    2. Enter the InternetNZ public key ID into the InternetNZ public key ID field. For instructions read the above information.
    3. You can specify your Passphrase for secret key that you have entered while secret key generation. Mind that this is optional. Therefore if you have set a password phrase during keys generation, enter it here. Otherwise leave this field blank.
    4. Specify your Email for identification secret key in the appropriate field: enter here the email you used to generate you PGP keys.
    5. Enter your Email for receiving polling messages into the corresponding field. Polling messages are related to actions which are applied to your registrar account or to your domains by someone else, as for Registry itself, or other registrars. The only action other registrars can do to your domains is transfer, so, getting these messages, you will know if a domain is transferred from your registrar.
    6. If any action has been done to your account during last 24 hours, polling result will be sent to a certain email address, which you can enter in InternetNZ plugin configuration, 'Email for receiving polling messages' field.
    7. You must provide your Partner ID (your Registrar ID) which is your registrar ID InternetNZ assigned to you after the authorization.
    8. Provide the InternetNZ PGP public key encoded text: copy and past the obtained InternetNZ PGP public key into the InternetNZ PGP public key field.
    9. Enter Your PGP public key encoded text: copy and past your public key. You can get your public key using command gpg --export --armour <username> > filename where <username> is either email or name you used when generated your keys and filename is the name of the file where your PGP public key is stored.
    10. Paste Your PGP secret key text: to get your secret key, use command gpg --export-secret-key --armour <username> > filename.

      Note: It is highly advised to export and save your secret key into a external secure place to avoid possible hacker ravage.

    11. After you save this configuration, keys will be imported into HSPcomplete PGP environment. It's home directory is /etc/hspc/gpg. To see the available keys, log in to HSPcomplete VE and run command gpg --homedir /etc/hspc/gpg --list-keys

Click the OK button to save the plug-in configuration.

Please send us your feedback on this help page