ldns-keygen(1) [debian man page]

ldns-keygen(1)						      General Commands Manual						    ldns-keygen(1)

NAME

       ldns-keygen - generate a DNSSEC key pair

SYNOPSIS

       ldns-keygen [ OPTION ] DOMAIN

DESCRIPTION

       ldns-keygen  is used to generate a private/public keypair. When run, it will create 3 files; a .key file with the public DNSKEY, a .private
       file with the private keydata and a .ds with the DS record of the DNSKEY record.

       It prints out the basename for these files: K<name>+<alg>+<id>

OPTIONS

       -a <algorithm>
	      Create a key with this algorithm. Specifying 'list' here gives a list  of  supported  algorithms.   Several  alias  names  are  also
	      accepted (from older versions and other software), the list gives names from the RFC.  Also the plain algo number is accepted.

       -b <bits>
	      Use this many bits for the key length.

       -k     When given, generate a key signing key. This just sets the flag field to 257 instead of 256 in the DNSKEY RR in the .key file.

       -r device
	      Make ldns-keygen use this file to seed the random generator with. This will default to /dev/random.

       -v     Show the version and exit

AUTHOR

       Written by the ldns team as an example for ldns usage.

REPORTING BUGS

       Report bugs to <ldns-team@nlnetlabs.nl>.

COPYRIGHT

       Copyright  (C)  2005-2008 NLnet Labs. This is free software. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR
       PURPOSE.

								    27 May 2008 						    ldns-keygen(1)

ldns-keyfetcher(1)					      General Commands Manual						ldns-keyfetcher(1)

NAME

       ldns-keyfetcher - retrieve the DNSSEC DNSKEYs for a zone

SYNOPSIS

       ldns-keyfetcher [ OPTIONS ] DOMAIN

DESCRIPTION

       ldns-keyfetcher is used to retrieve the DNSKEYs of a zone.

       First  it  finds all authoritative nameservers of the zone by tracing it from the root down. All authoritative nameservers are then queried
       (using TCP) for the DNSKEY RRset of the zone apex. If the results are all the same, the key resource record set is printed.

OPTIONS

       -4 Only use IPv4

       -6 Only use IPv6

       -h Show a help text and exit

       -i Insecurer mode; there will only be one query for the DNSKEYS. There will not be crosschecking of all authoritative nameservers.

       -v verbosity

       Set the verbosity level. The following levels are available:

	0: default, only print the DNSKEY RRset found, or an error on failure.
	1: Show the nameservers that are queried
	2: Show more info on what is checked
	3: Show the intermediate results (authority and dnskey rrsets)
	4: Print the answer packets that are returned

       -r file

       Use file as the root hints file, should contain A records in presentation format. The default is /etc/named.root. You  can  get	this  file
       from http://www.internic.net/zones/named.root.

       -s Don't print the keys to stdout, but store them in files.

       The filenames will be of the format K<file>.+<alg>.+<keytag>.key

AUTHOR

       Written by Jelte Jansen for NLnet Labs.

REPORTING BUGS

       Report bugs to <ldns-team@nlnetlabs.nl>.

COPYRIGHT

       Copyright  (C)  2006 NLnet Labs. This is free software. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PUR-
       POSE.

								    4 Apr 2006							ldns-keyfetcher(1)