dnssec-importkey — Import DNSKEY records from external systems so they can be managed.
dnssec-importkey
[-f
] [filename
-K
] [directory
-P
] [date/offset
-D
] [date/offset
-h
] [-v
] [level
keyname
]
dnssec-importkey
read a DNSKEY record and generated a .key/.private key pair.
Publication (-P
) and deletions (-D
)
times can be set for the key.
filename
Filename to read the key from.
directory
Sets the directory in which the key files are to reside.
ttl
Sets the default TTL to use for this key when it is converted
into a DNSKEY RR. If the key is imported into a zone,
this is the TTL that will be used for it, unless there was
already a DNSKEY RRset in place, in which case the existing TTL
would take precedence. importkey the default TTL to
0
or none
removes it.
Emit usage message and exit.
level
Sets the debugging level.
Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '-', it is interpreted as an offset from the present time. For convenience, if such an offset is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the offset is computed in years (defined as 365 24-hour days, ignoring leap years), months (defined as 30 24-hour days), weeks, days, hours, or minutes, respectively. Without a suffix, the offset is computed in seconds. To unset a date, use 'none'.
date/offset
Sets the date on which a key is to be published to the zone. After that date, the key will be included in the zone but will not be used to sign it.
date/offset
Sets the date on which the key is to be deleted. After that date, the key will no longer be included in the zone. (It may remain in the key repository, however.)