Bug #21731 for bind9-public: bogus "file not found" error from dnssec-dsfromkey

dnssec-dsfromkey incorrectly reports "file not found" if it is given a filename that doesn't end in .key: $ dig +noall +answer dnskey . >root-dnskey $ dnssec-dsfromkey root-dnskey >root-ds dnssec-dsfromkey: fatal: invalid keyfile name root-dnskey: file not found $ mv root-dnskey root-dnskey.key $ dnssec-dsfromkey root-dnskey.key >root-ds $ dnssec-dsfromkey -? Usage: dnssec-dsfromkey options [-K dir] keyfile dnssec-dsfromkey options [-K dir] [-c class] -s dnsname dnssec-dsfromkey options -f zonefile (as zone name) dnssec-dsfromkey options -f zonefile zonename Version: 9.7.1-P2 Options: -v <verbose level> -K <directory>: directory in which to find key file or keyset file -a algorithm: digest algorithm (SHA-1 or SHA-256) -1: use SHA-1 -2: use SHA-256 -l: add lookaside zone and print DLV records -s: read keyset from keyset-<dnsname> file -c class: rdata class for DS set (default: IN) -f file: read keyset from zone file -A: when used with -f, include all keys in DS set, not just KSKs Output: DS or DLV RRs $ Tony. -- f.anthony.n.finch <dot@dotat.at> http://dotat.at/ FAIR ISLE FAEROES: CYCLONIC BECOMING SOUTHWESTERLY 5 TO 7, OCCASIONALLY GALE 8 AT FIRST, DECREASING 4 AT TIMES. MODERATE OR ROUGH, OCCASIONALLY VERY ROUGH AT FIRST. RAIN OR SQUALLY SHOWERS. MODERATE, OCCASIONALLY POOR.

---

> Yes, I know that works :-) The problem is that the error message is > incorrect: it claims the file does not exist when it does. Yeah, we can definitely tidy that message up and make it more helpful. But it's not exactly bogus; it's correctly reporting the errno it encountered. If you're not specific enough about your request, it tries different filenames to figure out what you mean, and eventually gives up. The "file not found" refers to "keyset-rootns-dnskey." if I recall correctly.

---