dnssec-checkds8
Dnssec delegation consistency checking tool
Usage
dnssec-checkds [-l
domain]
[-f
file]
[-d
dig
path]
[-D
dsfromkey
path]
zone
dnssec-dsfromkey [-l
domain]
[-f
file]
[-d
dig
path]
[-D
dsfromkey
path]
zone
Overview
dnssec-checkds verifies the correctness of Delegation Signer (DS) or DNSSEC Lookaside Validation (DLV) resource records for keys in a specified zone.
Options
-
-f file -
If a
fileis specified, then the zone is read from that file to find the DNSKEY records. If not, then the DNSKEY records for the zone are looked up in the DNS.
-
-l domain -
Check for a DLV record in the specified lookaside domain, instead of checking for a DS record in the zone's parent. For example, to check for DLV records for "example.com" in ISC's DLV zone, use: dnssec-checkds -l dlv.isc.org example.com
-d dig path
Specifies a path to a dig binary. Used for testing.
-D dsfromkey path
Specifies a path to a dnssec-dsfromkey binary. Used for testing.
Releases
59 releases since macOS 10.13; the text changed 1 time.