
dnssec-signzone | 127
Linux
Commands
This is the Title of the Book, eMatter Edition
Copyright © 2006 O’Reilly & Associates, Inc. All rights reserved.
-h Print help message, then exit.
-p Use pseudo-random data to sign the zone key.
-r device
Specify the device to use as a source of randomness when
creating keys. This can be a device file, a file containing
random data, or the string keyboard to specify keyboard
input. By default, /dev/random will be used when available,
and keyboard input will be used when it is not.
-s start-time
Specify the date and time the records become valid. The end-
time may be specified in yyyymmddhhmmss notation, or given
as +n seconds from the current time. The default is the current
time.
dnssec-signzone
dnssec-signzone [options] zonefile [key-identifiers]
System administration command. Sign a secure DNS zonefile with
the signatures in the specified list of key-identifiers. If signed
keysets associated with the zone are found in the current directory,
include their signatures in the signed zone file. The dnssec-sign-
zone command writes the signed zone information to a file named
db-domainname.signed. This file should be referenced in a zone
statement in a named.conf file. For more information on Secure
DNS, see DNS and BIND (O’Reilly), or read RFC 2535.
Options
-a Verify generated signatures.
-c class
Specify the DNS class of the keyset.
-d directory
Search directory for signed keyfiles. ...