FreeBSD Manual Pages
RRSIG(1) General Commands Manual RRSIG(1) NAME rrsig -- generate RRSIG records for a zone SYNOPSIS rrsig [-kz] [-s start] [-e end] keyfile [zonefile] DESCRIPTION rrsig signs the records in a zone and writes DNSSEC RRSIG records to stan- dard output. The signatures are generated for the zone described in zonefile, which must be in the format described by RFC 1035. An RRSIG record contains a signature for a set of DNS records (RRset), all with the same name and type. These records are returned along with the re- sults of a query and the signatures can be verified with the public keys in the DNSKEY records for the domain. OPTIONS -k Sign the DNSKEY records in the zone. The key in keyfile must have a DNSKEY record in the zone with the SEP flag set. -z Sign the non-DNSKEY records in the zone. The key in keyfile must have a DNSKEY record in the zone. -s The unix time at which the signature becomes valid. -e The unix time after which the signature is no longer valid. If neither -k or -z is specified, all records in the zone are signed. EXAMPLES Sign the records in the example.com zone with the key in key.pem $ rrsig key.pem example.com.zone example.com. 86400 IN RRSIG SOA 13 2 86400 20200616002419 20200517002419 32716 example.com. pT8tmBBTpTG139CBJbN1MbshvygYyaiNn713gmvMw2Y/C2dTwGSZwuriXOk7luLb+Ej9OHvcjgaNaVzWnu5IiQ== example.com. 86400 IN RRSIG A 13 2 86400 20200616002419 20200517002419 32716 example.com. ziulNlLfYTwUO0VGiVW4TSR3Pfg8j/RhUhuWCbL2rn9PVBUIr3P0ql5JHkfskfCy9BNDIW7rSIWxwuLBULfudw== example.com. 86400 IN RRSIG NS 13 2 86400 20200616002419 20200517002419 32716 example.com. 9FdDokZ6RWGcAZTgpB430T71t9NZWeCZLTqxkeDyi77vxDt5eRwCNdzdDIEYaChGIfX6NBcrFIZ9Arz7vEA+ww== example.com. 1200 IN RRSIG NSEC 13 2 1200 20200616002419 20200517002419 32716 example.com. QeClnuEuVdq0Wppv+kH0DNR3huWFw7Rack0ZuFRqEpRLfVx/NTaaieHBax4SJTgecaF2MgpT+f/yJsRe/rsr3g== example.com. 86400 IN RRSIG DNSKEY 13 2 86400 20200616002419 20200517002419 32716 example.com. ypFHj/ttCnJkzOsCSj+SM+pU7yj9jfT7IaHZpotrU1ITOQBj2x+5nhQSj7dAbi21N4Vjie1rS5vx7E6T2g0msg== ns1.example.com. 86400 IN RRSIG A 13 3 86400 20200616002419 20200517002419 32716 example.com. /M9W4asOST8JuRfibKA0hf780GX3HglEsgB1PoNuV2PCK5sTXWKVexb7wfxAeBAK/gDsLy3HQIPH2im6iRuI9g== ns1.example.com. 1200 IN RRSIG NSEC 13 3 1200 20200616002419 20200517002419 32716 example.com. Mph6z5j6ZePdrxoO/vBr1rwA76a/0lpkUEfsiNWOtELtoPCNRrhRDxvQWM/mPfRw+plfzFXqANymU5shvPwZZA== SEE ALSO dnskey(1), ds(1), rrsig(1), tlsa(1) FreeBSD ports 15.quarterly May 10, 2021 RRSIG(1)
NAME | SYNOPSIS | DESCRIPTION | OPTIONS | EXAMPLES | SEE ALSO
Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=rrsig&sektion=1&manpath=FreeBSD+Ports+15.1.quarterly>