tools for searching/removing stale keys

Jay Ford jay-ford at
Mon Feb 28 18:31:25 UTC 2011

On Thu, 24 Feb 2011, Antonio Querubin wrote:
> Has anyone come up with scripts/tools for removing stale zone-signing keys 
> but leaving key-signing keys which are in the same directory alone?

Take a look at

It's a collection of scripts for dealing with routine DNS tasks related to 
multiple views & DNSSEC.  The "check-keys" script might be close to what 
you're after.

Jay Ford, Network Engineering Group, Information Technology Services
University of Iowa, Iowa City, IA 52242
email: jay-ford at, phone: 319-335-5555, fax: 319-335-2951

More information about the bind-users mailing list