rendered paste bodyrsi-dns # zonesigner -verb -verb -verb -verb -verb -gends -zone robert.wesh.netsec.tislabs.com robert.wesh.netsec.tislabs.com db.robert.wesh.netsec.tislabs.com.signed
using default keyrec file robert.wesh.netsec.tislabs.com.krf
checking options and arguments
arguments:
zone - robert.wesh.netsec.tislabs.com
zonefile - robert.wesh.netsec.tislabs.com
zoneftmp - robert.wesh.netsec.tislabs.com.zs
zoneout - db.robert.wesh.netsec.tislabs.com.signed
zonesigner arguments:
krfile - <robert.wesh.netsec.tislabs.com.krf>
nokrfile - <>
entropymsg - <1>
savekeys - <0>
archdir - <>
key-signing parameters:
algorithm - <-a rsasha1>
random - <-r /dev/urandom>
ksize - <-b 1024>
kskdir - <keys>
ksklife - <15768000>
genksk - <0>
usepub - <0>
zsize - <-b 1024>
zskdir - <keys>
zsklife - <604800>
genzsk - <0>
kgopts - <>
zone-signing parameters:
enddate - <-e +2592000>
gends - <-g>
ksdir - <-d sets>
szopts - <>
external commands:
checkzone - </usr/local/sbin/named-checkzone>
keygen - </usr/local/sbin/dnssec-keygen>
signzone - </usr/local/sbin/dnssec-signzone>
if zonesigner appears hung, strike keys until the program completes
(see the "Entropy" section in the man page for details)
initial zone verification