1.. highlight:: console 2 3kzonesign – DNSSEC signing utility 4================================== 5 6Synopsis 7-------- 8 9:program:`kzonesign` [*options*] **-c** *conf_file* *zone_name* 10 11Description 12----------- 13 14This utility reads the zone's zone file, signs the zone according to given 15configuration, and writes the signed zone file back. 16 17Options 18....... 19 20**-c**, **--config** *conf_file* 21 Knot DNS configuration file (same as for knotd). 22 23**-o**, **--outdir** *dir_name* 24 Write the output zone file to the specified directory instead of the configured one. 25 26**-r**, **--rollover** 27 Allow key roll-overs and NSEC3 re-salt. In order to finish possible KSK submission, 28 set the KSK's **active** timestamp to now (**+0**) using :doc:`keymgr<man_keymgr>`. 29 30**-t**, **--time** *timestamp* 31 Sign the zone (and roll the keys if necessary) as if it was at the time 32 specified by timestamp. 33 34**-h**, **--help** 35 Print the program help. 36 37**-V**, **--version** 38 Print the program version. 39 40Parameters 41.......... 42 43*zone_name* 44 A name of the zone to be signed. 45 46Exit values 47----------- 48 49Exit status of 0 means successful operation. Any other exit status indicates 50an error. 51 52See Also 53-------- 54 55:manpage:`knot.conf(5)`, :manpage:`keymgr(8)`. 56