OS Manuals

/usr/bin/dnssec-dsfromkey

Utilities for DNSSEC keys and DNS zone files management

From bind-dnssec-tools 9.20.30-r1 (os), captured 2026-11-05 by running dnssec-dsfromkey --help (exit 1). permalink

dnssec-dsfromkey: invalid argument --
Usage:
    dnssec-dsfromkey [options] keyfile

    dnssec-dsfromkey [options] -f zonefile [zonename]

    dnssec-dsfromkey [options] -s dnsname

    dnssec-dsfromkey [-h|-V]

Version: 9.20.30
Options:
    -1: digest algorithm SHA-1 (deprecated)
    -2: digest algorithm SHA-256
    -a algorithm: digest algorithm (SHA-1 (deprecated), SHA-256 or SHA-384)
    -A: include all keys in DS set, not just KSKs (-f only)
    -c class: rdata class for DS set (default IN) (-f or -s only)
    -C: print CDS records
    -f zonefile: read keys from a zone file
    -h: print help information
    -K directory: where to find key or keyset files
    -w split base64 rdata text into chunks
    -s: read keys from keyset-<dnsname> file
    -T: TTL of output records (omitted by default)
    -v level: verbosity
    -V: print version information
Output: DS or CDS RRs
Options (13)
OptionDescriptionSource
-1This option is an abbreviation for -a SHA1.man
-2This option is an abbreviation for -a SHA-256.man
-a algorithmThis option specifies a digest algorithm to use when converting DNSKEY records to DS records.man
-AThis option indicates that ZSKs are to be included when generating DS records.man
-c classThis option specifies the DNS class;man
-CThis option generates CDS records rather than DS records.man
-f fileThis option sets zone file mode, in which the final dnsname argument of dnssec-dsfromkey is the DNS domain name of a zone whose master file can be read from file.man
-hThis option prints usage information.man
-K directoryThis option tells BIND 9 to look for key files or keyset- files in directory.man
-sThis option enables keyset mode, in which the final dnsname argument from dnssec-dsfromkey is the DNS domain name used to locate a keyset- file.man
-T TTLThis option specifies the TTL of the DS records.man
-v levelThis option sets the debugging level.man
-VThis option prints version information.man

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.