ldns-verifyzone(1) | General Commands Manual | ldns-verifyzone(1) |
ldns-verify-zone - read a DNSSEC signed zone and verify it.
ldns-verify-zone ZONEFILE
ldns-verify-zone reads a DNS zone file and verifies it.
RRSIG resource records are checked against the DNSKEY set at the zone apex.
Each name is checked for an NSEC(3), if appropriate.
Alternatively, if -k is not specified, and a default trust anchor (/etc/unbound/root.key) exists and contains a valid DNSKEY or DS record, it will be used as the trust anchor.
0: Be silent
1: Print result, and any errors
2: Same as 1 for now
3: Print result, any errors, and the names that are
being checked
4: Same as 3 for now
5: Print the zone after it has been read, the result,
any errors, and the names that are being checked
periods are given in ISO 8601 duration format:
If no file is given standard input is read.
Written by the ldns team as an example for ldns usage.
Report bugs to <ldns-team@nlnetlabs.nl>.
Copyright (C) 2008 NLnet Labs. This is free software. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
27 May 2008 |