dnssec-dsfromkey incorrectly reports "file not found" if it is given a filename that doesn't end in .key: $ dig +noall +answer dnskey . >root-dnskey $ dnssec-dsfromkey root-dnskey >root-ds dnssec-dsfromkey: fatal: invalid keyfile name root-dnskey: file not found $ mv root-dnskey root-dnskey.key $ dnssec-dsfromkey root-dnskey.key >root-ds $ dnssec-dsfromkey -? Usage: dnssec-dsfromkey options [-K dir] keyfile dnssec-dsfromkey options [-K dir] [-c class] -s dnsname dnssec-dsfromkey options -f zonefile (as zone name) dnssec-dsfromkey options -f zonefile zonename Version: 9.7.1-P2 Options: -v -K : directory in which to find key file or keyset file -a algorithm: digest algorithm (SHA-1 or SHA-256) -1: use SHA-1 -2: use SHA-256 -l: add lookaside zone and print DLV records -s: read keyset from keyset- file -c class: rdata class for DS set (default: IN) -f file: read keyset from zone file -A: when used with -f, include all keys in DS set, not just KSKs Output: DS or DLV RRs $ Tony. -- f.anthony.n.finch http://dotat.at/ FAIR ISLE FAEROES: CYCLONIC BECOMING SOUTHWESTERLY 5 TO 7, OCCASIONALLY GALE 8 AT FIRST, DECREASING 4 AT TIMES. MODERATE OR ROUGH, OCCASIONALLY VERY ROUGH AT FIRST. RAIN OR SQUALLY SHOWERS. MODERATE, OCCASIONALLY POOR.