DNST-KEY2DS(1)

📦 version 0.2.0, in nixpkgs unstable

✨ DNST-KEY2DS(1) ✨

okay so bestie, this is a page from the dnst manual (yes, that dnst 💅) and it's literally all about turning DNSKEYs into DS records. buckle up 🎀

💖 NAME 💖

dnst-key2ds — generate DS RRs from the DNSKEYs in a keyfile. that's it, that's the whole vibe ✨

🌸 SYNOPSIS 🌸

dnst key2ds [OPTIONS] <KEYFILE>

🦋 DESCRIPTION 🦋

so dnst key2ds generates a DS RR for each DNSKEY in <KEYFILE>. one key in, one DS out, no cap 🫶

for each key, the following file will be created:

K<name>+<alg>+<id>.ds

and the base name K<name>+<alg>+<id> gets printed to stdout. so you know exactly what it did, iconic behaviour honestly 👑

🧚 ARGUMENTS 🧚

  • <KEYFILE> — bestie this has to be a file containing one or more RFC 4034 DNSKEY resource records in presentation format. that's the deal, that's the requirement, no substitutions 💀

💅 OPTIONS 💅

  • -a <NUMBER OR MNEMONIC>, --algorithm <NUMBER OR MNEMONIC> — use the given algorithm for the digest. defaults to the digest algorithm used for the DNSKEY, and if it can't be determined, it falls back to SHA-1. so like, it's got a backup plan, we love a prepared queen 🌈
  • -f, --force — overwrite existing .ds files. it will absolutely steamroll them, so use with intent, bestie 🔥
  • --ignore-sep — ignore the SEP flag and make DS records for any key. every key gets a DS, no questions asked, main character energy for all of them 👑
  • -n — write the generated DS records to stdout instead of a file. no files touched, just vibes and text 🌸
  • -h, --help — print the help text: short summary with -h, long help with --help. pick your fighter 🫶

⭐ AUTHOR ⭐

NLnet Labs — absolute legends, fr fr 💜

2024–2026, NLnet Labs 🎀

and that's the whole page bestie!! 🦋 this one's dnst version 0.2.0-alpha2, dated May 15, 2026 — so it's fresh, it's cute, it ate, periodt 💅✨

📦 where this page comes from