.\" -*- mode: troff; coding: utf-8 -*-
.\" Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43)
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>.
.ie n \{\
.    ds C` ""
.    ds C' ""
'br\}
.el\{\
.    ds C`
.    ds C'
'br\}
.\"
.\" Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\"
.\" If the F register is >0, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
.\" entries marked with X<> in POD.  Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.\"
.\" Avoid warning from groff about undefined register 'F'.
.de IX
..
.nr rF 0
.if \n(.g .if rF .nr rF 1
.if (\n(rF:(\n(.g==0)) \{\
.    if \nF \{\
.        de IX
.        tm Index:\\$1\t\\n%\t"\\$2"
..
.        if !\nF==2 \{\
.            nr % 0
.            nr F 2
.        \}
.    \}
.\}
.rr rF
.\" ========================================================================
.\"
.IX Title "GETDS 1"
.TH GETDS 1 2023-07-29 "perl v5.38.0" "User Contributed Perl Documentation"
.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
.nh
.SH NAME
getds \- Create a DS record from DNSKEYing information
.SH SYNOPSIS
.IX Header "SYNOPSIS"
.Vb 1
\&  getds <domain>
.Ve
.SH DESCRIPTION
.IX Header "DESCRIPTION"
\&\fBgetds\fR will create a DS record from DNSKEYs for the specified DNS
domain.  It does this by converting DNSKEYs to DS records using the
specified hashing algorithm.  The results can then be passed to
upstream DNSSEC-supporting parents or to DLV registries.
.PP
\&\fBgetds\fR will also pull the parent's published DS records and compare
them against the existing keys.  It will then list any DS records not
published in the parent, as well as any DS records that are published
in the parent but which don't match an existing key.
.SH OPTIONS
.IX Header "OPTIONS"
\&\fBgetds\fR takes the following options:
.IP "\fB\-a ALGORITHMS\fR" 4
.IX Item "-a ALGORITHMS"
.PD 0
.IP "\fB\-\-hash\-algorithm algorithm ALGORITHMS\fR" 4
.IX Item "--hash-algorithm algorithm ALGORITHMS"
.PD
This option specifies the hash algorithm to use when converting
DNSKEYs to DS records.  It may be a comma-separated list if multiple
algorithms are desired.  The algorithms to choose from may be either
SHA256 or SHA1.
.Sp
The default is SHA256,SHA1
.IP "\fB\-f KEYFILE\fR" 4
.IX Item "-f KEYFILE"
.PD 0
.IP "\fB\-\-read\-key\-file KEYFILE\fR" 4
.IX Item "--read-key-file KEYFILE"
.PD
This option specifies a file with a DNSKEY stored in it (such as
created by bind's dnssec-keygen program).  This is helpful for
comparing a known good key file against something that is actually
published.
.IP \fB\-z\fR 4
.IX Item "-z"
.PD 0
.IP \fB\-\-print\-zsks\fR 4
.IX Item "--print-zsks"
.PD
This option causes \fBgetds\fR to print ZSK DS records, as well as KSK records.
.IP \fB\-p\fR 4
.IX Item "-p"
.PD 0
.IP \fB\-\-dont\-check\-parent\fR 4
.IX Item "--dont-check-parent"
.PD
Instructs \fBgetds\fR to not check the records in the parent for their
published DS records.
.IP \fB\-q\fR 4
.IX Item "-q"
.PD 0
.IP \fB\-\-quiet\fR 4
.IX Item "--quiet"
.PD
Produces quiet output with no explanatory headers.  In other words, it only
prints the DS records generated from the DNSKEYs.
.Sp
Note: Running with \-q implies \-p.
.SH "SECURITY CONSIDERATIONS"
.IX Header "SECURITY CONSIDERATIONS"
By default, \fBgetds\fR pulls data from the live DNS.  If your DNS resolver
isn't configured so that this is pulled securely, then the results
can't be trusted.
.SH COPYRIGHT
.IX Header "COPYRIGHT"
Copyright 2008\-2014 SPARTA, Inc.  All rights reserved.
See the COPYING file included with the DNSSEC-Tools package for details.
.SH AUTHOR
.IX Header "AUTHOR"
Wes Hardaker, hardaker AT AT AT users.sourceforge.net