man.dnssec-settime.html revision 892503bd484c106493e3c8053155b364a522ec03
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson - Copyright (C) 2000-2003 Internet Software Consortium.
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson - Permission to use, copy, modify, and/or distribute this software for any
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson - purpose with or without fee is hereby granted, provided that the above
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson - copyright notice and this permission notice appear in all copies.
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson - PERFORMANCE OF THIS SOFTWARE.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<link rel="prev" href="man.dnssec-revoke.html" title="dnssec-revoke">
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<link rel="next" href="man.dnssec-signzone.html" title="dnssec-signzone">
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<table width="100%" summary="Navigation header">
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<tr><th colspan="3" align="center"><span class="application">dnssec-settime</span></th></tr>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<a accesskey="p" href="man.dnssec-revoke.html">Prev</a>�</td>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<th width="60%" align="center">Manual pages</th>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-signzone.html">Next</a>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<a name="man.dnssec-settime"></a><div class="titlepage"></div>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<p><span class="application">dnssec-settime</span> — Set the key timing metadata for a DNSSEC key</p>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<div class="cmdsynopsis"><p><code class="command">dnssec-settime</code> [<code class="option">-f</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] {keyfile}</p></div>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<a name="id2621777"></a><h2>DESCRIPTION</h2>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<p><span><strong class="command">dnssec-settime</strong></span>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson reads a DNSSEC private key file and sets the key timing metadata
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson as specified by the <code class="option">-P</code>, <code class="option">-A</code>,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson <code class="option">-R</code>, <code class="option">-I</code>, and <code class="option">-D</code>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson options. The metadata can then be used by
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson <span><strong class="command">dnssec-signzone</strong></span> or other signing software to
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson determine when a key is to be published, whether it should be
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson used for signing a zone, etc.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson If none of these options is set on the command line,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson then <span><strong class="command">dnssec-settime</strong></span> simply prints the key timing
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson metadata already stored in the key.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson When key metadata fields are changed, both files of a key
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson pair (<code class="filename">Knnnn.+aaa+iiiii.key</code> and
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson <code class="filename">Knnnn.+aaa+iiiii.private</code>) are regenerated.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Metadata fields are stored in the private file. A human-readable
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson description of the metadata is also placed in comments in the key
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson file. The private file's permissions are always set to be
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson inaccessible to anyone other than the owner (mode 0600).
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Force an update of an old-format key with no metadata fields.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Without this option, <span><strong class="command">dnssec-settime</strong></span> will
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson fail when attempting to update a legacy key. With this option,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the key will be recreated in the new format, but with the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson original key data retained. The key's creation date will be
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson set to the present time. If no other values are specified,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson then the key's publication and activation dates will also
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson be set to the present time.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Sets the directory in which the key files are to reside.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<dt><span class="term">-L <em class="replaceable"><code>ttl</code></em></span></dt>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Sets the default TTL to use for this key when it is converted
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson into a DNSKEY RR. If the key is imported into a zone,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson this is the TTL that will be used for it, unless there was
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson already a DNSKEY RRset in place, in which case the existing TTL
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson would take precedence. Setting the default TTL to
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson <code class="literal">0</code> or <code class="literal">none</code> removes it.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Emit usage message and exit.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Sets the debugging level.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Specifies the cryptographic hardware to use, when applicable.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson When BIND is built with OpenSSL PKCS#11 support, this defaults
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to the string "pkcs11", which identifies an OpenSSL engine
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson that can drive a cryptographic accelerator or hardware service
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson module. When BIND is built with native PKCS#11 cryptography
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson (--enable-native-pkcs11), it defaults to the path of the PKCS#11
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson provider library specified via "--with-pkcs11".
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<a name="id2622233"></a><h2>TIMING OPTIONS</h2>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson If the argument begins with a '+' or '-', it is interpreted as
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson an offset from the present time. For convenience, if such an offset
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi',
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson then the offset is computed in years (defined as 365 24-hour days,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson ignoring leap years), months (defined as 30 24-hour days), weeks,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson days, hours, or minutes, respectively. Without a suffix, the offset
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson is computed in seconds. To unset a date, use 'none' or 'never'.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Sets the date on which a key is to be published to the zone.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson After that date, the key will be included in the zone but will
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson not be used to sign it.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<dt><span class="term">-A <em class="replaceable"><code>date/offset</code></em></span></dt>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Sets the date on which the key is to be activated. After that
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson date, the key will be included in the zone and used to sign
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<dt><span class="term">-R <em class="replaceable"><code>date/offset</code></em></span></dt>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Sets the date on which the key is to be revoked. After that
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson date, the key will be flagged as revoked. It will be included
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson in the zone and will be used to sign it.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<dt><span class="term">-I <em class="replaceable"><code>date/offset</code></em></span></dt>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Sets the date on which the key is to be retired. After that
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson date, the key will still be included in the zone, but it
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson will not be used to sign it.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<dt><span class="term">-D <em class="replaceable"><code>date/offset</code></em></span></dt>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Sets the date on which the key is to be deleted. After that
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson date, the key will no longer be included in the zone. (It
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson may remain in the key repository, however.)
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<dt><span class="term">-S <em class="replaceable"><code>predecessor key</code></em></span></dt>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Select a key for which the key being modified will be an
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson explicit successor. The name, algorithm, size, and type of the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson predecessor key must exactly match those of the key being
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson modified. The activation date of the successor key will be set
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to the inactivation date of the predecessor. The publication
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson date will be set to the activation date minus the prepublication
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson interval, which defaults to 30 days.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<dt><span class="term">-i <em class="replaceable"><code>interval</code></em></span></dt>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Sets the prepublication interval for a key. If set, then
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the publication and activation dates must be separated by at least
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson this much time. If the activation date is specified but the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson publication date isn't, then the publication date will default
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to this much time before the activation date; conversely, if
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the publication date is specified but activation date isn't,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson then activation will be set to this much time after publication.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson If the key is being set to be an explicit successor to another
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson key, then the default prepublication interval is 30 days;
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson otherwise it is zero.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson As with date offsets, if the argument is followed by one of
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson interval is measured in years, months, weeks, days, hours,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson or minutes, respectively. Without a suffix, the interval is
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson measured in seconds.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<a name="id2630222"></a><h2>PRINTING OPTIONS</h2>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson <span><strong class="command">dnssec-settime</strong></span> can also be used to print the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson timing metadata associated with a key.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Print times in UNIX epoch format.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<dt><span class="term">-p <em class="replaceable"><code>C/P/A/R/I/D/all</code></em></span></dt>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Print a specific metadata value or set of metadata values.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson The <code class="option">-p</code> option may be followed by one or more
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson of the following letters to indicate which value or values to print:
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson <code class="option">C</code> for the creation date,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson <code class="option">P</code> for the publication date,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson <code class="option">A</code> for the activation date,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson <code class="option">R</code> for the revocation date,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson <code class="option">I</code> for the inactivation date, or
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson <code class="option">D</code> for the deletion date.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson To print all of the metadata, use <code class="option">-p all</code>.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<p><span class="corpauthor">Internet Systems Consortium</span>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<table width="100%" summary="Navigation footer">
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<a accesskey="p" href="man.dnssec-revoke.html">Prev</a>�</td>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-signzone.html">Next</a>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<td width="40%" align="left" valign="top">
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<span class="application">dnssec-revoke</span>�</td>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson<td width="40%" align="right" valign="top">�<span class="application">dnssec-signzone</span>