cerr<<"activate-zone-key ZONE KEY-ID Activate the key with key id KEY-ID in ZONE\n";
cerr<<"add-zone-key ZONE [zsk|ksk] [bits]\n";
cerr<<" [rsasha1|rsasha256|rsasha512|gost|ecdsa256|ecdsa384]\n";
- cerr<<" Add a ZSK or KSK to zone and specify algo&bits\n";
- cerr<<"check-zone ZONE Check a zone for correctness\n";
- cerr<<"check-all-zones Check all zones for correctness\n";
- cerr<<"create-bind-db FNAME Create DNSSEC db for BIND backend (bind-dnssec-db)\n";
- cerr<<"deactivate-zone-key ZONE KEY-ID Deactivate the key with key id KEY-ID in ZONE\n";
- cerr<<"disable-dnssec ZONE Deactivate all keys and unset PRESIGNED in ZONE\n";
- cerr<<"export-zone-dnskey ZONE KEY-ID Export to stdout the public DNSKEY described\n";
- cerr<<"export-zone-key ZONE KEY-ID Export to stdout the private key described\n";
- cerr<<"hash-zone-record ZONE RNAME Calculate the NSEC3 hash for RNAME in ZONE\n";
- cerr<<"import-zone-key ZONE FILE Import from a file a private key, ZSK or KSK\n";
- cerr<<" [ksk|zsk] Defaults to KSK\n";
- cerr<<"rectify-zone ZONE [ZONE ..] Fix up DNSSEC fields (order, auth)\n";
- cerr<<"rectify-all-zones Rectify all zones.\n";
- cerr<<"remove-zone-key ZONE KEY-ID Remove key with KEY-ID from ZONE\n";
- cerr<<"secure-zone ZONE [ZONE ..] Add KSK and two ZSKs\n";
- cerr<<"set-nsec3 ZONE 'params' [narrow] Enable NSEC3 with PARAMs. Optionally narrow\n";
- cerr<<"set-presigned ZONE Use presigned RRSIGs from storage\n";
- cerr<<"show-zone ZONE Show DNSSEC (public) key details about a zone\n";
- cerr<<"unset-nsec3 ZONE Switch back to NSEC\n";
- cerr<<"unset-presigned ZONE No longer use presigned RRSIGs\n\n";
+ cerr<<" Add a ZSK or KSK to zone and specify algo&bits\n";
+ cerr<<"check-zone ZONE Check a zone for correctness\n";
+ cerr<<"check-all-zones Check all zones for correctness\n";
+ cerr<<"create-bind-db FNAME Create DNSSEC db for BIND backend (bind-dnssec-db)\n";
+ cerr<<"deactivate-zone-key ZONE KEY-ID Deactivate the key with key id KEY-ID in ZONE\n";
+ cerr<<"disable-dnssec ZONE Deactivate all keys and unset PRESIGNED in ZONE\n";
+ cerr<<"export-zone-dnskey ZONE KEY-ID Export to stdout the public DNSKEY described\n";
+ cerr<<"export-zone-key ZONE KEY-ID Export to stdout the private key described\n";
+ cerr<<"hash-zone-record ZONE RNAME Calculate the NSEC3 hash for RNAME in ZONE\n";
+ cerr<<"import-zone-key ZONE FILE Import from a file a private key, ZSK or KSK\n";
+ cerr<<" [ksk|zsk] Defaults to KSK\n";
+ cerr<<"rectify-zone ZONE [ZONE ..] Fix up DNSSEC fields (order, auth)\n";
+ cerr<<"rectify-all-zones Rectify all zones.\n";
+ cerr<<"remove-zone-key ZONE KEY-ID Remove key with KEY-ID from ZONE\n";
+ cerr<<"secure-zone ZONE [ZONE ..] Add KSK and two ZSKs\n";
+ cerr<<"set-nsec3 ZONE ['params' [narrow]] Enable NSEC3 with PARAMs. Optionally narrow\n";
+ cerr<<"set-presigned ZONE Use presigned RRSIGs from storage\n";
+ cerr<<"show-zone ZONE Show DNSSEC (public) key details about a zone\n";
+ cerr<<"unset-nsec3 ZONE Switch back to NSEC\n";
+ cerr<<"unset-presigned ZONE No longer use presigned RRSIGs\n\n";
cerr<<"Options:"<<endl;
cerr<<desc<<endl;
return 0;