defaults(3)

✨ NAME ✨

Net::DNS::SEC::Tools::defaults — DNSSEC-Tools default values. Also hi bestie, this is the defaults(3) page from the User Contributed Perl Documentation, and it's giving centralized-defaults realness 💖

🌸 SYNOPSIS 🌸

         use Net::DNS::SEC::Tools::defaults;

         %defs = dnssec_tools_alldefaults();

         $defalg = dnssec_tools_default("algorithm");

         $cz_path = dnssec_tools_default("zonecheck");

         $ksklife = dnssec_tools_default("ksklife");

         @default_names = dnssec_tools_defnames();

🦋 DESCRIPTION 🦋

This module is literally the keeper of a set of default values used by DNSSEC-Tools programs. The whole point? Centralize all those defaults in one single place so they don't end up spread around multiple programs like confetti at a party. It's giving organization, it's giving main character energy ✨

💅 INTERFACES 💅

dnssec_tools_alldefaults()

This interface returns a copy of all the DNSSEC-Tools defaults in a hash table. So you get the whole default squad in one hash. Obsessed.

dnssec_tools_default(default)

This interface returns the value of a DNSSEC-Tools default. You pass it default, which is the name of a default to look up, and it hands you back the value. That's it. Iconic.

dnssec_tools_defnames()

This interface returns the names of all the DNSSEC-Tools defaults. It doesn't return any default values, just the names — but then you can pass those names to dnssec_tools_default() to get the values. It's a two-step slay.

🎀 DEFAULT FIELDS 🎀

okay so here are all the defaults defined for DNSSEC-Tools. Buckle up bestie, there are a lot 💖

• admin-email — holds the default email address for the DNSSEC-Tools administrator.
• archivedir — holds the default directory where keys get archived.
• algorithm — holds the default encryption algorithm.
• enddate — holds the default zone life, measured in seconds.
• entropy_msg — tells you whether zonesigner should display an entropy message or not.
• keygen — holds the path to the key-generation program.
• keygen-opts — holds a set of options for the key-generation program.
• kskcount — holds the default number of KSK keys to generate for a zone.
• ksklength — holds the default length of a KSK key.
• ksklife — holds the default lifespan of a KSK key. This is only used for determining when to rollover the KSK key — keys otherwise have no concept of a lifespan, fr. It's measured in seconds.
• lifespan-max — the maximum lifespan of a key.
• lifespan-min — the minimum lifespan of a key.
• log_tz — the timezone used in log-message timestamps.
• mailer-server — the mail server that will be contacted by dt_adminmail(). This gets passed to Mail::Send.
• mailer-type — the type of mailer that will be contacted by dt_adminmail(). This is passed to Mail::Mailer (by way of Mail::Send). Any values recognized by Mail::Mailer may be used here.
• prog_ksk1 ... prog_ksk7 — these defaults hold the default phase commands to be executed by rollerd for each phase of KSK rollover. The default keyword means the normal phase processing should be performed. You can give multiple commands, but they must be separated by bangs. The default keyword may be combined with other commands.
• prog_normal — these defaults hold the default phase commands to be executed by rollerd when a zone is not in a rollover state. The default keyword means the normal phase processing should be performed. Multiple commands may be given, but they must be separated by bangs. The default keyword may be combined with other commands.
• prog_zsk1 ... prog_zsk7 — these defaults hold the default phase commands to be executed by rollerd for each phase of ZSK rollover. The default keyword means the normal phase processing should be performed. Multiple commands may be given, but they must be separated by bangs. The default keyword may be combined with other commands.
• random — holds the default random number generator device.
• revperiod — holds the default revocation period of a KSK key. This is the minimum period of time a revoked KSK is required to remain in the signing set so that it's properly observed by resolvers. Measured in seconds.
• rndc — the default path of the BIND rndc program.
• roll_loadzone — this flag indicates if rollerd should have the DNS daemon reload its zones.
• roll_logfile — the path to rollerd's log file.
• roll_loglevel — the default logging level for rollerd.
• roll_sleeptime — holds the default sleep time used by the rollerd rollover daemon.
• savekeys — indicates whether or not keys should be deleted when they're no longer in use.
• tacontact — this is merely a placeholder for the contact information. There is no useful default value for this.
• tadnsvalconffile — specifies the path of the dnsval configuration file.
• tanamedconffile — specifies the path of the named configuration file.
• taresolvconf — specifies the path to the DNS resolv.conf file.
• tasleeptime — holds the default value for how long the daemon should sleep.
• tasmtpserver — specifies the name of the SMTP server.
• tatmpdir — specifies the location of trustman's temporary directory.
• usegui — indicates whether or not the DNSSEC-Tools GUI should be used for option entry.
• zone_errors — holds the maximum number of consecutive errors a particular zone may have before it's changed to be a skip zone.
• zonecheck — holds the path to the zone-verification program.
• zonecheck-opts — holds a set of options for the zone-verification program. This default is set to "-i local". This value has been found to greatly improve the amount of time it takes named-checkzone to run.
• zonefile-parser — specifies the parser that will be used to parse zone files. The default value is to use the Net::DNS::ZoneFile module.
• zonesign — holds the path to the zone-signing program.
• zonesign-opts — holds a set of options for the zone-signing program.
• zskcount — holds the default number of ZSK keys to generate for a zone.
• zsklength — holds the default length of the ZSK key.
• zsklife — holds the default lifespan of the ZSK key. This is only used for determining when to rollover the ZSK key — keys otherwise have no concept of a lifespan. Measured in seconds.

👑 DNSSEC-TOOLS PROGRAM FIELDS 👑

These are the defaults that hold the paths to the DNSSEC-Tools programs. Each one is literally just the path to a program, and they're all here so you don't have to guess. 💅

• blinkenlights — path to the DNSSEC-Tools blinkenlights program.
• cleanarch — path to the DNSSEC-Tools cleanarch program.
• cleankrf — path to the DNSSEC-Tools cleankrf program.
• dtconf — path to the DNSSEC-Tools dtconf program.
• dtconfchk — path to the DNSSEC-Tools dtconfchk program.
• dtdefs — path to the DNSSEC-Tools dtdefs program.
• dtinitconf — path to the DNSSEC-Tools dtinitconf program.
• expchk — path to the DNSSEC-Tools expchk program.
• fixkrf — path to the DNSSEC-Tools fixkrf program.
• genkrf — path to the DNSSEC-Tools genkrf program.
• getdnskeys — path to the DNSSEC-Tools getdnskeys program.
• keyarch — path to the DNSSEC-Tools keyarch program.
• krfcheck — path to the DNSSEC-Tools krfcheck program.
• lskrf — path to the DNSSEC-Tools lskrf program.
• lsroll — path to the DNSSEC-Tools lsroll program.
• rollchk — path to the DNSSEC-Tools rollchk program.
• rollctl — path to the DNSSEC-Tools rollctl program.
• rollerd — path to the DNSSEC-Tools rollerd program.
• rollinit — path to the DNSSEC-Tools rollinit program.
• rolllog — path to the DNSSEC-Tools rolllog program.
• rollrec-editor — path to the DNSSEC-Tools rollrec-editor program.
• rollset — path to the DNSSEC-Tools rollset program.
• signset-editor — path to the DNSSEC-Tools signset-editor program.
• tachk — path to the DNSSEC-Tools tachk program.
• timetrans — path to the DNSSEC-Tools timetrans program.
• trustman — path to the DNSSEC-Tools trustman program.
• zonesigner — path to the DNSSEC-Tools zonesigner program.

💜 COPYRIGHT 💜

Copyright 2006-2014 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. Periodt.

🌈 AUTHOR 🌈

Wayne Morrison, tewok@tislabs.com. That's the author bestie 🫶

okay that's the whole page! this was defaults(3), from perl v5.44.0, dated 2026-10-17. now go centralize those defaults bestie 💖✨