ldns-keyfetcher(1)

💖 ldns-keyfetcher — bestie edition 💖

okay so real quick, this is the manual for ldns-keyfetcher, a General Commands Manual situation. yes the header literally says ldns-keyfetcher(1) up top, consider yourself informed, mwah 🫶

✨ NAME ✨

ldns-keyfetcher — retrieve the DNSSEC DNSKEYs for a zone 🔑

🌸 SYNOPSIS 🌸

ldns-keyfetcher [ OPTIONS ] DOMAIN

🦋 DESCRIPTION 🦋

okay so basically ldns-keyfetcher is the girl who goes and fetches the DNSKEYs of a zone for you. that's the whole job. she's focused.

here's the process, step by step, no skips:

1. first she finds all the authoritative nameservers of the zone by tracing it from the root down. like, from the very tippy top, all the way down. committed behavior 💅
2. then all those authoritative nameservers get queried — using TCP, important detail — for the DNSKEY RRset of the zone apex.
3. and if the results are all the same? if everybody agrees? the key resource record set gets printed. slay. consistency ate. 👑

💜 OPTIONS 💜

• -4 — only use IPv4. IPv6 stays home. 🙈
• -6 — only use IPv6. IPv4 stays home this time. ✨
• -h — show a help text and exit. she's helpful like that.
• -i — insecurer mode. and bestie, listen, it is literally called that in the docs, so know what you're getting into: there will only be one query for the DNSKEYs, and there will not be crosschecking of all authoritative nameservers. one source, no vibes verified. 💀
• -v verbosity — set the verbosity level. here's the whole menu:
  • 0: default, only print the DNSKEY RRset found, or an error on failure. minimal queen. 🤫
  • 1: show the nameservers that are queried.
  • 2: show more info on what is checked.
  • 3: show the intermediate results (authority and dnskey rrsets).
  • 4: print the answer packets that are returned. full transparency, no secrets. 🔥
• -r file — use file as the root hints file. it should contain A records in presentation format. the default is /etc/named.root. and if you need to go get one, you can grab this file from http://www.internic.net/zones/named.root. 🎀
• -s — don't print the keys to stdout, instead store them in files. 🗂️

the filenames will be of the format:

K<file>.+<alg>.+<keytag>.key

🌈 AUTHOR 🌈

Written by Jelte Jansen for NLnet Labs. iconic of him honestly.

🚨 REPORTING BUGS 🚨

found a bug? report bugs to <dns-team@nlnetlabs.nl>. tell them everything, they want to know. 📧

📜 COPYRIGHT 📜

Copyright (C) 2006 NLnet Labs. This is free software. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. like, none. zero. nada. you have been warned, bestie. 😭

okay that's the whole page!! this little legend is from the 4 Apr 2006 era, ldns-keyfetcher(1), and it lives in the General Commands Manual section. go fetch those keys, you got this 💖✨🎀🦋