Create DS and DLV records

Evan Hunt each at
Wed May 5 06:46:37 UTC 2010

> dnssec-signzone will produce them when you sign your zone.

Note, by default it only creates the DS records.  To make the DLV records
you have to add a -l argument, such as "-l"  The records get
parked in a file called either dsset-<zonename> or dlvset-<zonename>.

> dnssec-dsfromkey will produce produce DS records.  You can convert
> between a DS and DLV record using a ordinary text editor.

...or you can also use the -l argument with dnssec-dsfromkey.

Evan Hunt -- each at
Internet Systems Consortium, Inc.

More information about the bind-users mailing list