Man page - dnst-key2ds(1)

Packages contas this manual

Manual

DNST-KEY2DS(1) dnst DNST-KEY2DS(1)

dnst-key2ds - Generate DS RRs from the DNSKEYs in a keyfile

dnst key2ds [OPTIONS] <KEYFILE>

dnst key2ds generates a DS RR for each DNSKEY in <KEYFILE>.

The following file will be created for each key: K<name>+<alg>+<id>.ds. The base name K<name>+<alg>+<id> will be printed to stdout.

<KEYFILE>
<KEYFILE> must be a file containing one or more RFC 4034 DNSKEY resource records in presentation format.

Use the given algorithm for the digest. Defaults to the digest algorithm used for the DNSKEY, and if it can't be determined SHA-1.

Overwrite existing .ds files.

Ignore the SEP flag and make DS records for any key.

Write the generated DS records to stdout instead of a file.

Print the help text (short summary with -h, long help with --help).

NLnet Labs

2024–2026, NLnet Labs

March 5, 2026 0.2.0-alpha1