1.. highlight:: console
2
3kzonesign – DNSSEC signing utility
4==================================
5
6Synopsis
7--------
8
9:program:`kzonesign` [*options*] **-c** *conf_file* *zone_name*
10
11Description
12-----------
13
14This utility reads the zone's zone file, signs the zone according to given
15configuration, and writes the signed zone file back.
16
17Options
18.......
19
20**-c**, **--config** *conf_file*
21  Knot DNS configuration file (same as for knotd).
22
23**-o**, **--outdir** *dir_name*
24  Write the output zone file to the specified directory instead of the configured one.
25
26**-r**, **--rollover**
27  Allow key roll-overs and NSEC3 re-salt. In order to finish possible KSK submission,
28  set the KSK's **active** timestamp to now (**+0**) using :doc:`keymgr<man_keymgr>`.
29
30**-t**, **--time** *timestamp*
31  Sign the zone (and roll the keys if necessary) as if it was at the time
32  specified by timestamp.
33
34**-h**, **--help**
35  Print the program help.
36
37**-V**, **--version**
38  Print the program version.
39
40Parameters
41..........
42
43*zone_name*
44  A name of the zone to be signed.
45
46Exit values
47-----------
48
49Exit status of 0 means successful operation. Any other exit status indicates
50an error.
51
52See Also
53--------
54
55:manpage:`knot.conf(5)`, :manpage:`keymgr(8)`.
56