1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
|
# Copyright 2004-2012 SPARTA, Inc. All rights reserved.
# See the COPYING file included with the DNSSEC-Tools package for details.
DNSSEC-Tools
Is your domain secure?
This directory contains tools for use in managing DNSSEC environments.
Brief descriptions of these tools are given below.
blinkenlights Gives a complex graphical display of rollerd activity
and allows some control of zones.
bubbles Gives a simple graphical display of rollerd activity.
buildrealms Construct a realms environment from a realms file and
a set of files that will compose the realms.
cleanarch Cleans key archives.
cleankrf Cleans unreferenced key keyrecs from keyrec files.
dtck Runs validation checks on all the data files used by
the DNSSEC-Tools scripts.
dtconf Displays the key/value pairs in a DNSSEC-Tools
configuration file.
dtconfchk Checks a DNSSEC-Tools configuration file for validity.
dtdefs Display DNSSEC-Tools defaults.
dtinitconf Create a new DNSSEC-Tools configuration file from
command-line options and defaults.
dtrealms The realms manager daemon.
dtreqmods Checks for Perl modules required by DNSSEC-Tools.
dtupdkrf Updates an old-format keyrec file to the current
format. The keyrec file format changes rarely,
so this is not commonly needed.
expchk Checks a keyrec file for expired zones.
fixkrf Fixes a keyrec file whose encryption keys have been
moved since the keyrecs have been written.
genkrf Generates a keyrec file using existing key signing
key and/or zone signing keys.
getdnskeys Fetch, compare and remember a list of DNSKEYs
from DNS zones
grandvizier Graphic display of rollover environments.
keyarch Archives obsolete keys.
keymod Modifies key generation parameters in a keyrec file.
krfcheck Verifies the validity of a keyrec file.
lights Gives a very simple GUI summary of zone rollover states.
lskrf Lists the contents of a keyrec file.
lsrealm Lists the contents of a realms file.
lsroll Lists the contents of a rollrec file.
realmchk Verifies the validity of a realms file.
realmctl Control program for the dtrealms daemon.
realminit Generates realms records for a realm.
realmset Modifies the realm records in a realms file.
rollctl Control program for the rollover daemon.
rollerd The rollover daemon.
rollchk Verifies the validity of a rollrec file.
rollinit Generates rollrec records for domains.
rolllog Adds a log record to the rollover daemon's log file.
rollrec-editor GUI editor for managing rollrecs in rollrec files.
rollset Modifies the rollrec records in a rollrec file.
signset-editor GUI editor for managing signing sets in keyrec files.
tachk Reads a trusted-keys block from a named.conf file and
performs queries to see if the configured trust
anchors are still published by the zones.
NOTE: This script additionally requires Net::DNS::SEC.
timetrans Converts time units (weeks, days, etc.) into the
appropriate number of seconds. Intended for use in
calculating the end-time argument used by zonesigner
and dnssec-signzone.
zonesigner Generates a set of keys for a zone and signs the zone
with those keys. This combines the functionality of
dnssec-keygen and dnssec-signzone, recording relevant
information in a keyrec file.
Keyrec files are documented in the source for .../modules/keyrec.pm and in
.../modules/file-keyrec.
The DNSSEC-Tools configuration file is documented in
.../etc/dnssec/dnssec-tools.conf.pm.
|
