ldns-key2ds(1)

ldns-key2ds1

Transform a dnskey rr to a ds rr

Usage

ldns-key2ds file

Overview

ldns-key2ds is used to transform a public DNSKEY RR to a DS RR. When run it will read file with a DNSKEY RR in it and it will create a .ds file with the DS RR in it.

It prints out the basename for this file (K<name>+<alg>+<id>).

By default it takes a pick of algorithm similar to the key algorithm, SHA1 for RSASHA1, and so on.

Options

-f

Ignore SEP flag (i.e. make DS records for any key)

-n

Write the result DS Resource Record to stdout instead of a file

-1

Use SHA1 as the hash function.

-2

Use SHA256 as the hash function

-g

Use GOST as the hash function

-4

Use SHA384 as the hash function

Releases

10 releases since Debian 5.0 (Lenny); the text changed 4 times.

  1. 5.0
  2. 6.0–7
  3. 8
  4. 9–12
  5. 13–Arch

-4 since Debian 9 (Stretch); -f since Debian 8 (Jessie); -g since Debian 9 (Stretch).

Author

Written by the ldns team as an example for ldns usage.

Reporting bugs

Report bugs to <[email protected]>.

From ldns 1.9.2-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.