ldns-key2ds(1)

📦
version 1.9.2 · 3 versions
, in alpine 3.22, alpine 3.23, alpine 3.24, arch rolling, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, opensuse-leap 16.0, ubuntu questing, ubuntu resolute, ubuntu stonking

💖 ldns-key2ds — the glow-up from DNSKEY to DS 💖

okay bestie, welcome to ldns-key2ds(1), straight outta the General Commands Manual section. she's a little tool, she's from the ldns fam, and she does exactly one thing but she does it flawlessly. let's get into it 🫶

✨ NAME ✨

ldns-key2ds — transform a DNSKEY RR to a DS RR

like… the whole personality is right there in the name. DNSKEY in, DS out. no cap. 💅

🌸 SYNOPSIS 🌸

ldns-key2ds file

one argument, that's it, she's low-maintenance. 🎀

🦋 DESCRIPTION 🦋

so here's the vibe: ldns-key2ds is used to transform a public DNSKEY RR into a DS RR. that's the entire assignment and she ate.

when you run it, it will read file with a DNSKEY RR in it, and it will create a .ds file with the DS RR in it. boom. iconic. 🔥

then it prints out the basename for this file, and that basename looks like this:

K<name>+<alg>+<id>

and by default it takes a pick of algorithm similar to the key algorithm — like, SHA1 for RSASHA1, and so on. she's matching the energy of your key, fr fr. 💖

ngl that auto-pick is doing a lot of quiet heavy lifting for you. she just knows.

💅 OPTIONS 💅

  • -f — Ignore the SEP flag (i.e. make DS records for any key). yes bestie, any key, she's not being picky.
  • -n — Write the result DS Resource Record to stdout instead of a file. so instead of a .ds file situation, it just goes straight to your terminal. very main character of it. ✨
  • -1 — Use SHA1 as the hash function.
  • -2 — Use SHA256 as the hash function
  • -g — Use GOST as the hash function
  • -4 — Use SHA384 as the hash function
heads up, the hash-function flags are like a little squad: -1, -2, -g, -4. pick your fighter and go. 👑

👑 AUTHOR 👑

Written by the ldns team as an example for ldns usage.

so yes, she's technically a demo. a showcase piece. a teaching moment that's also genuinely useful. we love a multi-hyphenate. 🌈

😭 REPORTING BUGS 😭

Report bugs to <dns-team@nlnetlabs.nl>.

like, if something's acting up, tell the team, don't just suffer in silence bestie, that's not the move. 🫶

Copyright (C) 2005 NLnet Labs. This is free software. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

okay real talk — that "NO warranty" is in ALL CAPS for a reason. no warranty, not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. that's not me being dramatic, that's literally what it says. 💀

mwah 💋 that's the whole page, and that's the ldns-key2ds(1) experience from the General Commands Manual. shoutout to the 30 May 2005 date stamp and the ldns crew for this lil legend. periodt. 🎀💖✨

📦 where this page comes from