ldns-zsplit – split up a zone file Synopsisldns-zsplit [ OPTIONS ] zonefile DescriptionOptions-n NUMBER Split after NUMBER RRs, ldns-zsplit will not split in the middle of an RRs. Each part is saved with a numerical suffix, starting with .000. The largest suffix is thus .999. -o ORIGIN use ORIGIN as origin when reading the zonefile….
ldns-zcat – reunite (z)split up a zone files Synopsisldns-zcat zonefiles Descriptionldns-zcat will read in a bunch of (z)split up zonefiles and creates a new larger zone file. The SOA record in the first part is used as the SOA record in the generated zone. The resulted zone file is printed to standard output. Options-o ORIGIN…
ldns-walk – Retrieve the contents of a DNSSEC signed zone Synopsisldns-walk [ OPTION ] ZONE Descriptionldns-walk is used to retrieve the contents of a DNSSEC signed zone. It does this through NSEC-walking (following the chain of NSEC records) and ‘guessing’ the next non-existent owner name for each NSEC. Note that it might get stuck on…
ldns-version – print out the version of the ldns-library and tools on this system Synopsisldns-version Descriptionldns-version is used to print out version information of the ldns library and tools Optionsldns-version has no options. AuthorWritten by the ldns team as an example for ldns usage. Reporting BugsReport bugs to <ldns-team [at] nlnetlabs.nl>. CopyrightCopyright (C) 2005 NLnet…
ldns-verify-zone – read a DNSSEC signed zone and verify it. Synopsisldns-verify-zone ZONEFILE Descriptionldns-verify-zone reads a DNS zone file and verifies it. RRSIG resource records are checked against the DNSKEY set at the zone apex. Each name is checked for an NSEC(3), if appropriate. Options-h Show usage and exit -a Apex only, check only the zone…
ldns-update – send a dynamic update packet Synopsisldns-update [ zone ] ip [ tsig_name tsig_als tsig_hmac ] Descriptionldns-update is used to send a dynamic update packet. Optionszone Use this zone instead of trying to read it from the zonefile’s SOA record. ip Send the update to this IP address tsig_name tsig_alg tsig_hmac Use TSIG (rfc2845)…
ldns-testns – simple fake nameserver tool Synopsysldns-testns [ OPTION ] datafile Descriptionldns-testns can be used to provide answers to DNS queries for testing. The answers are premade, and can be tailored to testing needs. The answers can be wildly invalid or unparseable. This program is a debugging aid. It is not efficient, especially with a…
ldns-test-edns – test if dns cache supports EDNS and DNSSEC. Synopsisldns-test-edns [ -i ] { ip } Descriptionldns-test-edns tests a DNS cache and checks if it supports EDNS0 and DNSSEC types so that it can be used as a dnssec-enabled DNS cache. It sends two queries to the cache, one for the root key and…
ldns-signzone – sign a zonefile with DNSSEC data Synopsisldns-signzone [ OPTIONS ] ZONEFILE KEY [KEY [KEY] … ] Descriptionldns-signzone is used to generate a DNSSEC signed zone. When run it will create a new zonefile that contains RRSIG and NSEC resource records, as specified in RFC 4033, RFC 4034 and RFC 4035. Keys must be…
ldns-rrsig – print out the inception and expiration dates in human readable form Synopsisldns-rrsig domain [ type ] Descriptionldns-rrsig is used to print the expiration and inception date of a RRSIG. The first argument is a domain name. ldns-rrsig will query the authoritative servers for that domain to get a list of RRSIGs. It will…
ldns-revoke – sets the revoke bit of a DNSKEY Synopsisldns-revoke file Descriptionldns-revoke is used to revoke a public DNSKEY RR. When run it will read file with a DNSKEY RR in it, sets the revoke bit and write back the output to file . Options-n Write the result to stdout instead of a file AuthorWritten…
ldns-resolver – tries to create a resolver from a resolv.conf file. Synopsisldns-resolver file Descriptionldns-resolver tries to create a resolver from a resolv.conf file. This is only useful to test the library for robusteness with input data. Optionsldns-resolver takes a filename of the resolv.conf file as input. For example ldns-resolver /etc/resolv.conf will show if the file…
ldns-read-zone – read a zonefile and print it Synopsisldns-read-zone ZONEFILE Descriptionldns-read-zone reads a DNS zone file and prints it. The output has 1 resource record per line, and no pretty-printing makeup. Options-c Canonicalize all resource records in the zone before printing -d Only print DNSSEC data from the zone. This option skips every record that…
ldns-nsec3-hash – print out the NSEC3 hash for a domain name Synopsisldns-nsec3-hash <domain_name> Descriptionldns-nsec3-hash is used to print out the NSEC3 hash for the given domain name. Options-a number Use the given algorithm number for the hash calculation. Defaults to 1 (SHA-1). -s salt Use the given salt for the hash calculation. Salt value should…
ldns-notify – notify DNS servers that updates are available Synopsisldns-notify [options] -z zone servers Descriptionldns-notify sends a NOTIFY message to DNS servers. This tells them that an updated zone is available at the master servers. It can perform TSIG signatures and it can add a SOA serial number of the updated zone. If a server…
ldns-mx – print out the mx record(s) for a domain Synopsisldns-mx DOMAIN Descriptionldns-mx is used to print out mx information of a domain. Optionsldns-mx has no options. AuthorWritten by the ldns team as an example for ldns usage. Reporting BugsReport bugs to <ldns-team [at] nlnetlabs.nl>. CopyrightCopyright (C) 2005 NLnet Labs. This is free software. There…
ldns-keygen – generate a DNSSEC key pair Synopsisldns-keygen [ OPTION ] DOMAIN Descriptionldns-keygen is used to generate a private/public keypair. When run, it will create 3 files; a .key file with the public DNSKEY, a .private file with the private keydata and a .ds with the DS record of the DNSKEY record. ldns-keygen can also…
ldns-keyfetcher – retrieve the DNSSEC DNSKEYs for a zone Synopsisldns-keyfetcher [ OPTIONS ] DOMAIN Descriptionldns-keyfetcher is used to retrieve the DNSKEYs of a zone. First it finds all authoritative nameservers of the zone by tracing it from the root down. All authoritative nameservers are then queried (using TCP) for the DNSKEY RRset of the zone…
ldns-key2ds – transform a DNSKEY RR to a DS RR Synopsisldns-key2ds file Descriptionldns-key2ds is used to transform a public DNSKEY RR to a DS RR. When run it will read file with a DNSKEY RR in it and it will create a .ds file with the DS RR in it. It prints out the basename…
ldns-gen-zone – read a zonefile and print it while adding DS records and extra RR’s Synopsisldns-gen-zone ZONEFILE Descriptionldns-gen-zone reads a DNS zone file and prints it. It is build for speed, not for a nice formatting. The output has one resource record per line and no pretty-printing makeup. DNSSEC data (NSEC, NSEC3, RRSIG or DNSKEY)…