/usr/bin/dnssec-verify: illegal option -- -
/usr/bin/dnssec-verify: illegal option -- e
/usr/bin/dnssec-verify: illegal option -- l
/usr/bin/dnssec-verify: illegal option -- p
dnssec-verify: invalid argument --
Usage:
dnssec-verify [options] zonefile [keys]
Version: 9.20.30
Options: (default value in parenthesis)
-v debuglevel (0)
-q quiet
-V: print version information
-o origin:
zone origin (name of zonefile)
-I format:
file format of input zonefile (text)
-c class (IN)
-E engine:
name of an OpenSSL engine to use
-x: DNSKEY record signed with KSKs only, not ZSKs
-z: All records signed with KSKs
Options (10)
| Option | Description | Source |
|---|
-q quiet | This option sets quiet mode, which suppresses output. | help + man |
-V | This option prints version information. | help + man |
-o origin: | This option indicates the zone origin. | help + man |
-I format: | This option sets the format of the input zone file. | help + man |
-E engine: | This option specifies the cryptographic hardware to use, when applicable. | help + man |
-x | This option verifies only that the DNSKEY RRset is signed with key-signing keys. | help + man |
-z | This option indicates that the KSK flag on the keys should be ignored when determining whether the zone is correctly signed. | help + man |
-c class | This option specifies the DNS class of the zone. (in the manual page but not in --help) | man |
-J filename | This option tells dnssec-verify to read the journal from the given file when loading the zone file. (in the manual page but not in --help) | man |
-v level | This option sets the debugging level. (in the manual page but not in --help) | man |
Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.