ods-kaspcheck(1)

✨ ods-kaspcheck ✨

okay bestie, welcome to the ods-kaspcheck(1) man page, brought to you by the OpenDNSSEC squad 💖 this is the lil sanity-checker for your policy, and she is so important, no cap.

🎀 NAME 🎀

ods-kaspcheck — does a whole sanity check of the policy for OpenDNSSEC. it's giving "vibe check but for your config files" 💅

🦋 SYNOPSIS 🦋

ods-kaspcheck [-c path -k path]

that's it, that's the whole summoning ritual ✨

🌸 DESCRIPTION 🌸

okay so. the OpenDNSSEC XML config files (conf.xml and kasp.xml) hand you so many options for setting up the OpenDNSSEC signing system. and like, some syntactic constraints get enforced by the .rng definition — like, is an element required or optional, that kind of thing — but some semantic constraints literally cannot be defined that way. for example: if NSEC3 is what you're using to secure the zone, then you should be making a consistent DNSKEY algorithm choice. the .rng can't tell you that. she doesn't know. 🙈

that's where ods-kaspcheck comes in, and she ate. she's here to check that your config files (conf.xml and kasp.xml) are semantically sane and have zero inconsistencies in them. main character energy fr fr.

💖 real talk: it is advisable to use this tool to check your configuration before you start using OpenDNSSEC. do the vibe check first. always.

👑 OPTIONS 👑

• -c, --conf path — path to an OpenDNSSEC configuration file. (defaults to /etc/opendnssec/conf.xml)
• -k, --kasp path — path to the KASP policy file. (defaults to the path given in the configuration file)
• -v, --version — display version information ✨
• -h, -?, --help — show the help screen 🫶

🌈 SEE ALSO 🌈

ods-control(8), ods-enforcerd(8), ods-enforcer(8), ods-hsmspeed(1), ods-hsmutil(1), ods-signer(8), ods-signerd(8), ods-timing(5), ods-kasp, opendnssec(7), http://www.opendnssec.org/

iykyk, go read the whole family 💜

⭐ AUTHORS ⭐

ods-kaspcheck was written by Alex Dalitz and Nominet as part of the OpenDNSSEC project. iconic behavior honestly 🎀

and that's a wrap, bestie 🦋 this page is from the OpenDNSSEC crew, dated February 2010 — yes she's a vintage queen and she still slays. mwah 💅💖