how to revert signed db zone file to unsgined plain text (remove dnssec keys)

Jelle de Jong jelledejong at
Sat Aug 8 19:17:09 UTC 2020

Hello everybody,

This will sound counter intuitive but I want to convert a file to (unsigned without 
keys). I do have the keys used, but not the original file that got singed.

I know I can convert the raw format to text but the zone file is rather 
big and i want to get rid of all the sign keys.

named-compilezone -f raw -F text -o 

named-checkzone -D -f raw 

Kind regards,

Jelle de Jong

More information about the bind-users mailing list