> dnssec-signzone will produce them when you sign your zone.

Note, by default it only creates the DS records.  To make the DLV records
you have to add a -l argument, such as "-l dlv.isc.org."  The records get
parked in a file called either dsset-<zonename> or dlvset-<zonename>.

> dnssec-dsfromkey will produce produce DS records.  You can convert
> between a DS and DLV record using a ordinary text editor.

...or you can also use the -l argument with dnssec-dsfromkey.

-- 
Evan Hunt -- e...@isc.org
Internet Systems Consortium, Inc.
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to