/usr/bin/dnssec-settime --help — Chainguard OS Manuals

From bind-dnssec-tools 9.20.30-r1 (os), captured 2026-11-05 by running dnssec-settime --help (exit 1). permalink

dnssec-settime: invalid argument --
Usage:
    dnssec-settime [options] keyfile

Version: 9.20.30
General options:
    -E engine:          specify OpenSSL engine
    -f:                 force update of old-style keys
    -K directory:       set key file location
    -L ttl:             set default key TTL
    -v level:           set level of verbosity
    -V:                 print version information
    -h:                 help
Timing options:
    -P date/[+-]offset/none: set/unset key publication date
    -P ds date/[+-]offset/none: set/unset DS publication date
    -P sync date/[+-]offset/none: set/unset CDS and CDNSKEY publication date
    -A date/[+-]offset/none: set/unset key activation date
    -R date/[+-]offset/none: set/unset key revocation date
    -I date/[+-]offset/none: set/unset key inactivation date
    -D date/[+-]offset/none: set/unset key deletion date
    -D ds date/[+-]offset/none: set/unset DS deletion date
    -D sync date/[+-]offset/none: set/unset CDS and CDNSKEY deletion date
    -S <key>: generate a successor to an existing key
    -i <interval>: prepublication interval for successor key (default: 30 days)
Key state options:
    -s: update key state file (default no)
    -g state: set the goal state for this key
    -d state date/[+-]offset: set the DS state
    -k state date/[+-]offset: set the DNSKEY state
    -r state date/[+-]offset: set the RRSIG (KSK) state
    -z state date/[+-]offset: set the RRSIG (ZSK) state
Printing options:
    -p C/P/Psync/A/R/I/D/Dsync/all: print a particular time value or values
    -u:                 print times in unix epoch format
Output:
     K<name>+<alg>+<new id>.key, K<name>+<alg>+<new id>.private

Options (22)

Option	Description	Source
`-E` engine:	This option specifies the cryptographic hardware to use, when applicable.	help + man
`-f`	This option forces an update of an old-format key with no metadata fields.	help + man
`-K` directory:	This option sets the directory in which the key files are to reside.	help + man
`-L` ttl:	This option sets the default TTL to use for this key when it is converted into a DNSKEY RR.	help + man
`-v` level:	This option sets the debugging level.	help + man
`-V`	This option prints version information.	help + man
`-h`	This option emits a usage message and exits.	help + man
`-u`	This option indicates that times should be printed in Unix epoch format.	help + man
`-P` date/offset	This option sets the date on which a key is to be published to the zone. (in the manual page but not in --help)	man
`-A` date/offset	This option sets the date on which the key is to be activated. (in the manual page but not in --help)	man
`-R` date/offset	This option sets the date on which the key is to be revoked. (in the manual page but not in --help)	man
`-I` date/offset	This option sets the date on which the key is to be retired. (in the manual page but not in --help)	man
`-D` date/offset	This option sets the date on which the key is to be deleted. (in the manual page but not in --help)	man
`-S` predecessor	This option selects a key for which the key being modified is an explicit successor. (in the manual page but not in --help)	man
`-i` interval	This option sets the prepublication interval for a key. (in the manual page but not in --help)	man
`-s`	This option indicates that when setting key timing data, the state file should also be updated. (in the manual page but not in --help)	man
`-g` state	This option sets the goal state for this key. (in the manual page but not in --help)	man
`-d` state	This option sets the DS state for this key as of the specified date, offset from the current date. (in the manual page but not in --help)	man
`-k` state	This option sets the DNSKEY state for this key as of the specified date, offset from the current date. (in the manual page but not in --help)	man
`-r` state	This option sets the RRSIG (KSK) state for this key as of the specified date, offset from the current date. (in the manual page but not in --help)	man
`-z` state	This option sets the RRSIG (ZSK) state for this key as of the specified date, offset from the current date. (in the manual page but not in --help)	man
`-p` C/P/Pds/Psync/A/R/I/D/Dds/Dsync/all	This option prints a specific metadata value or set of metadata values. (in the manual page but not in --help)	man

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.