[ldns-users] [ldns-signzone] Question on man page

François RONVAUX francois.ronvaux at gmail.com
Tue Apr 13 14:15:09 UTC 2021


Hello,


The man page says :
*-o* *origin* Use

this as the origin of the zone

So, if the zone I want to sign with DNSSEC is "mydomain.tld", I have to use
the command :
ldns-signzone -o tld zonefile $zsk $ksk

Correct ?

And about the NSEC3 signature, what are the usable algorithms with the "-n
-a" options .


Sorry if my questions are stupid but I'am discovering the DNSSEC tools.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/ldns-users/attachments/20210413/9deac416/attachment.htm>


More information about the ldns-users mailing list