Man page - cascade-keyset(1)
Packages contas this manual
Manual
| CASCADE-KEYSET(1) | Cascade | CASCADE-KEYSET(1) |
NAME
cascade-keyset - Execute manual key roll or key removal commands
SYNOPSIS
cascade keyset [OPTIONS] <ZONE> ksk|zsk|csk|algorithm <ROLL COMMAND> [OPTIONS]
cascade keyset [OPTIONS] <ZONE> remove-key [OPTIONS] <KEY>
DESCRIPTION
Execute manual key roll or key removal commands.
OPTIONS
- -h, --help
- Print the help text (short summary with -h, long help with --help).
COMMANDS
- ksk
- Command for KSK rolls.
- zsk
- Command for ZSK rolls.
- csk
- Command for CSK rolls.
- algorithm
- Command for algorithm rolls.
- remove-key
- Remove a key from the key set.
KEY ROLL COMMANDS FOR KSK|ZSK|CSK|ALGORITHM
- start-roll
- Start a key roll.
- propagation1-complete <TTL>
- Inform keyset that the changed RRsets and signatures have propagated.
TTL is the maximum TTL of the zone.
- cache-expired1
- Inform keyset that enough time has passed that caches should have expired.
- propagation2-complete <TTL>
- Inform keyset that the changed RRsets and signatures have propagated.
TTL is the maximum TTL of the zone.
- cache-expired2
- Inform keyset that enough time has passed that caches should have expired.
- roll-done
- Report that the final changes have propagated and the roll is done
ARGUMENTS FOR KEYSET REMOVE-KEY
- <KEY>
- The key to remove. This is the key's URI as reported by cascade zone status.
OPTIONS FOR KEYSET REMOVE-KEY
- --force
- Force a key to be removed even if the key is not stale.
- --continue
- Continue when removing the underlying keys fails.
SEE ALSO
- https://cascade.docs.nlnetlabs.nl
- Cascade online documentation
- cascade(1)
- Cascade CLI
- cascaded(1)
- Cascade Daemon
- cascade-dnst-keyset(1)
- Further documentation of the key roll commands (and more)
AUTHOR
NLnet Labs <cascade@nlnetlabs.nl>
COPYRIGHT
2025–2025, NLnet Labs
| November 21, 2025 | 0.1.0-alpha5 |